Path Traversal Vulnerability in Kibana Fleet by Elastic

CVE-2026-78591

What is CVE-2026-78591?

A vulnerability exists in the Kibana Fleet feature that allows for improper limitation of a pathname to a restricted directory, classified as Path Traversal. This issue can be exploited by low-privileged users to manipulate actions performed by higher-privileged users within the Fleet administration interface. Consequently, this could lead to the unauthorized deletion of critical resources, including accounts that possess elevated privileges, thereby posing a significant risk to organizational security.

References