Path Traversal Vulnerability in Kibana by Elastic

CVE-2026-78592

What is CVE-2026-78592?

The vulnerability in Kibana arises from improper restrictions on pathname access, allowing a low-privileged user to exploit the path traversal issue. This can lead to unauthorized deletion of sensitive resources when an administrator inadvertently interacts with the affected interface. Specifically, a user with tag creation abilities could manipulate the tag management interface to unintentionally target administrative resources, potentially compromising critical assets including administrative accounts. Remediation is essential to protect organizational integrity and security.

References