SB20261007237 - Incorrect authorization in Kibana

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261007237

SB20261007237 - Incorrect authorization in Kibana

Published: October 7, 2026

Security Bulletin ID SB20261007237
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Incorrect authorization (CVE-ID: CVE-2026-102412)

CWE-ID: CWE-863 - Incorrect Authorization

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to disclose sensitive information.

The vulnerability exists due to incorrect authorization in Kibana's Fleet Server host configuration functionality when handling access to sensitive credential material. A remote user can access private cryptographic keys configured for Fleet Server host connections that should be restricted to users with Fleet settings administrative access to disclose sensitive information.

Exploitation requires limited Fleet management privileges. Only deployments with SSL/TLS private key material stored in Fleet settings for Fleet Server hosts are exposed.


Remediation

Install update from vendor's website.

References