Path Traversal Vulnerability in Kibana Fleet by Elastic

CVE-2026-78599

What is CVE-2026-78599?

A Path Traversal vulnerability exists in the Fleet feature of Kibana, allowing low-privileged users with write access to manipulate pathnames. This flaw can enable them to trigger unauthorized deletions of internal resources through administrative actions. The exploitation requires interaction with the affected Fleet interface by an administrator, making it critical for users and admins to remain vigilant to this potential risk.

References