medium4.3
CVE-2026-63259
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied identifiers that reference scheduled …
Impact
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied identifiers that reference scheduled query result data from Kibana Spaces the requester is not authorized to access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Kibana | from 9.4.0 before 9.4.4 |