Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-78583— Incorrect Authorization in Kibana Leading to Privilege Escalation

Quick assessment

Affected

Elastic Kibana

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Elastic Kibana是荷兰Elastic公司开源的一个视觉化仪表板。 Elastic kibana 8.0.0版本至8.19.20版本、9.0.0版本至9.4.5版本和9.5.0版本至9.5.2版本存在授权问题漏洞，该漏洞源于授权不当，集成包中的Elasticsearch集群权限声明在用于生成已注册Elastic Agents的凭据之前未经过验证，拥有Fleet管理权限的用户可能通过输入数据操纵导致权限提升，使目标策略上的每个Elastic Agent获得具有任意提升的Elasticsearch集

CVSS 8.1 · High EPSS 0.39% · P31 Updated Sep 04, 2026

Possible ATT&CK Techniques 2 AI

T1059 · Command and Scripting Interpreter T1078 · Valid Accounts

Affected Version Matrix 3

Vendor	Product	Version Range	Status
Elastic	Kibana	`8.0.0≤ 8.19.20`	affected
		`9.0.0≤ 9.4.5`	affected
		`9.5.0≤ 9.5.2`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-78583

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Incorrect Authorization in Kibana Leading to Privilege Escalation

Source: CVE Program / CVE List V5

Vulnerability Description

Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153). Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding Fleet management privileges could therefore cause every Elastic Agent on a targeted policy to receive a credential carrying arbitrarily elevated Elasticsearch cluster privileges, up to and including full cluster administration.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

授权机制不正确

Source: CVE Program / CVE List V5

Vulnerability Title

Elastic kibana 授权问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Elastic	Kibana	8.0.0 ~ 8.19.20	-

II. Public POCs for CVE-2026-78583

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-78583

请登录查看更多情报信息。

Vendor Pages for CVE-2026-78583 (1)

🔗 Kibana 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-140) - Announcements / Security Announcements - Discuss the Elastic Stack Read full article

https://www.cve.org/CVERecord?id=CVE-2026-78583

Same Patch Batch · Elastic · 2026-09-03 · 7 CVEs total

CVE-2026-82302	8.1 HIGH	Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification
CVE-2026-82299	6.5 MEDIUM	Incorrect Authorization in Kibana Leading to Information Disclosure
CVE-2026-82298	4.3 MEDIUM	Incorrect Authorization in Kibana Leading to Denial of Service
CVE-2026-78596	4.3 MEDIUM	Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations
CVE-2026-78595	4.3 MEDIUM	Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure
CVE-2026-78593	4.3 MEDIUM	Improper Control of Generation of Code in Kibana Leading to Privilege Escalation

IV. Related Vulnerabilities

Same product: Kibana

Same vendor: Elastic

Same weakness: CWE-863