Incorrect Authorization in Kibana's Machine Learning Feature

CVE-2026-78598

What is CVE-2026-78598?

A vulnerability in Kibana's machine learning feature allows an authenticated user with job management privileges to expose saved objects across all Kibana spaces. This misconfiguration of access control can result in sensitive information being disclosed to users without proper access rights, raising concerns about data security and protection within the application.

References