{"id":"CVE-2026-115294","kind":"vulnerability","aliases":["CVE-2026-115294"],"related":[],"title":"Kibana Fleet: path traversal lets low-privilege user trigger unintended deletions","description":"Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to unauthorized resource deletion via Path Traversal (CAPEC-126). A low-privileged user with Fleet agent policies write access could cause a subsequent administrative action to act on unintended resources. This can result in the deletion of resources such as Kibana spaces and other organizational assets that the low-privileged user cannot delete directly. Exploitation requires an administrator to interact with the affected Fleet interface.","summary":"A path traversal flaw in Kibana's Fleet feature lets a user with Fleet agent policy write access make a later administrative action act on unintended resources. An attacker can get Kibana spaces and other organizational assets deleted that they could not delete directly.","severity":"high","cvss":7.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["elastic","fleet","kibana","runtime","self-hosted"],"not_affected_if":["fleet-not-used","managed-hosting","no-fleet"],"how_to_check":"- Check the Kibana version with `kibana --version` or the package manifest and compare it to the fixed versions in the vendor advisory.\n- Check whether the Fleet feature is in use and which users hold Fleet agent policies write access.","fix":null,"status":"open","published_at":"2026-11-03T17:17:55+00:00","first_seen_at":"2026-11-03T17:21:55+00:00","triaged_at":"2026-11-03T17:24:04+00:00","updated_at":"2026-11-03T17:26:12+00:00","category":"runtime","confidence":0.3,"triage":{"at":"2026-11-03T17:24:04Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Kibana Fleet: path traversal lets low-privilege user trigger unintended deletions","impact":"medium","summary":"A path traversal flaw in Kibana's Fleet feature lets a user with Fleet agent policy write access make a later administrative action act on unintended resources. An attacker can get Kibana spaces and other organizational assets deleted that they could not delete directly.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["kibana","elastic","fleet","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Kibana spaces and other organizational assets get deleted","analyst_note":"Find the Elastic advisory for CVE-2026-115294 to get the affected and fixed Kibana versions and any workaround.","how_to_check":"- Check the Kibana version with `kibana --version` or the package manifest and compare it to the fixed versions in the vendor advisory.\n- Check whether the Fleet feature is in use and which users hold Fleet agent policies write access.","plain_action":"","needs_analyst":true,"not_affected_if":["fleet-not-used","managed-hosting"],"who_is_affected":"Teams that run self-hosted Kibana with Fleet enabled and have users with Fleet agent policies write access. The sources say exploitation requires an administrator to interact with the affected Fleet interface, so instances without Fleet in use are less exposed.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000696,"input_tokens":4211,"output_tokens":550,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the Elastic advisory for CVE-2026-115294 to get the affected and fixed Kibana versions and any workaround.","search":"'-115294':15A,18A '-126':96C '-2026':14A,17A '-22':80C 'access':43B,107C 'act':49B,115C 'action':48B,113C 'administr':47B,112C,147C 'affect':152C 'agent':40B,104C 'asset':62B,134C 'attack':54B 'cannot':141C 'capec':95C 'caus':109C 'could':66B,108C 'cve':13A,16A 'cwe':79C 'delet':12A,63B,68B,91C,124C,142C 'direct':69B,143C 'directori':78C 'elast':19B 'exploit':144C 'featur':34B,85C 'flaw':29B 'fleet':2A,20B,33B,39B,84C,103C,153C 'get':56B 'host':25B 'improp':70C 'interact':149C 'interfac':154C 'kibana':1A,21B,31B,57B,83C,129C 'later':46B 'lead':87C 'let':5A,35B 'limit':71C 'low':7A,99C,138C 'low-privileg':6A,98C,137C 'make':44B 'organiz':61B,133C 'path':3A,27B,93C 'pathnam':74C 'polici':41B,105C 'privileg':8A,100C,139C 'requir':145C 'resourc':52B,90C,118C,126C 'restrict':77C 'result':121C 'runtim':22B 'self':24B 'self-host':23B 'space':58B,130C 'subsequ':111C 'travers':4A,28B,94C 'trigger':10A 'unauthor':89C 'unintend':11A,51B,117C 'user':9A,37B,101C,140C 'via':92C 'write':42B,106C","nicknames":[],"mitigations":[],"who_affected":"Teams that run self-hosted Kibana with Fleet enabled and have users with Fleet agent policies write access. The sources say exploitation requires an administrator to interact with the affected Fleet interface, so instances without Fleet in use are less exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["elastic","fleet","high","kibana","runtime","selfhosted"],"campaign_type":null,"first_public_at":"2026-11-03T17:17:55+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","cvss_by":"security@elastic.co","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115294","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115294","severity":null,"published_at":"2026-11-03T17:17:55+00:00","modified_at":"2026-11-03T17:17:55+00:00","first_seen_at":"2026-11-03T17:21:55+00:00","fetched_at":"2026-11-03T17:21:55+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-115294:1516","url":null,"severity":null,"published_at":"2026-11-03T17:26:12+00:00","modified_at":"2026-11-03T17:26:12+00:00","first_seen_at":"2026-11-03T17:26:12+00:00","fetched_at":"2026-11-03T17:26:12+00:00","note":"Could not find Elastic's ESA for CVE-2026-115294 (cve.org page is empty, NVD fetch returned nothing, searches by id and wording found nothing). Elastic has sibling Fleet path-traversal deletion advisories from Aug-Sep 2026 with different CVEs (ESA-2026-94, 157, 158, 159; fixed in 8.19.17/8.19.18/9.3.6/9.4.3). None of them mention agent policies or spaces, so I did not copy their versions. Fix and affected range stay unknown. To settle it: find the ESA on discuss.elastic.co Security Announcements that lists this CVE, probably newer than Oct 6."}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}