Authorization Flaw in Kibana Leads to Data Deletion Risks from Elastic

CVE-2026-78582

What is CVE-2026-78582?

A flaw in Kibana allows authenticated users with Synthetics privileges to delete Synthetics monitors across multiple spaces without proper authorization. This vulnerability arises from incorrectly configured access control, enabling users to perform deletion actions on monitors associated with private locations, resulting in the irretrievable loss of data. The flaw bypasses critical authorization checks, posing significant risks to data integrity, particularly for shared monitors that connect to private Elastic Agent configurations.

References