Path Traversal Vulnerability in Kibana Fleet by Elastic

CVE-2026-78590

What is CVE-2026-78590?

The Kibana Fleet feature has a security flaw that allows a low-privileged user with write access to Fleet Settings to exploit path traversal vulnerabilities. This could enable them to trigger administrative actions that unintentionally manipulate internal resources, including the potential deletion of critical assets like user accounts. Exploitation is contingent upon an administrator's interaction with the vulnerable Fleet interface, highlighting the need for heightened security measures in managing user permissions and validating input to mitigate this risk.

References