critical9.1
CVE-2025-25014
A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.
Impact
A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Kibana | from 8.3.0 before 8.17.6 Versions 8.18.0, 9.0.0 |