Live › vulnerability › CVE-2026-115295
An authenticated Kibana user with read access to connectors in one space can view connector execution logs from other spaces they should not reach. The exposed data includes connector names and IDs, execution status, timestamps, error messages, and aggregate execution statistics.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 17:21 UTC. All times on this page are UTC.
Affects Kibana deployments that use multiple spaces and grant users connector read access. Single-space deployments or instances where connector read access is limited to trusted users are less exposed. The sources do not name the affected or fixed Kibana versions.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user with read access to connectors in one Kibana space can retrieve connector execution log information from other spaces that they are not authorized to access. The disclosed information includes connector names and identifiers, execution status, timestamps, error messages, and aggregated execution statistics.
This page as .md · .json · in your agent: get_signal("CVE-2026-115295")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.