Skip to content
ElasticCVE-2026-72681

Elastic Kibana: privilege escalation

Medium6.5CVE-2026-72681 · Published Aug 13, 2026 · updated Sep 3, 2026

Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature's functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.

Elastic advisory

Affected versions

PackageAffectedFixed in
Kibana
Product
>= 9.4.0, <= 9.4.3No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-862

More Elastic advisories

All Elastic
Advisory
Elasticsearch: denial of service
Medium6.5Aug 13
A flaw in Elasticsearch
Medium4.3Aug 13
Elasticsearch: denial of service
Medium6.5Aug 13
Elasticsearch: denial of service
Medium6.5Aug 13
Elastic Kibana: denial of service
Medium6.5Aug 13
Elastic Kibana: missing authorization
High7.1Aug 13

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.