CVE-2026-56151

Analyzed Analyzed - Analysis Complete

Improper Input Validation in Kibana Leads to DoS

Publication date: 2026-07-01

Last updated on: 2026-07-02

Assigner: Elastic

Description

Improper Input Validation (CWE-20) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authenticated user can submit a specially crafted Fleet policy input that is not correctly validated, which can render Fleet agent, server, and policy management functionality unavailable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-01

Last Modified

2026-07-02

Generated

2026-07-21

AI Q&A

2026-07-01

EPSS Evaluated

2026-07-20

NVD

CVE-2026-56151

EUVD

EUVD-2026-41085

Affected Vendors & Products

Vendor	Product	Version / Range
elastic	kibana	From 8.0.0 (inc) to 8.19.17 (exc)
elastic	kibana	From 9.0.0 (inc) to 9.3.6 (exc)
elastic	kibana	From 9.4.0 (inc) to 9.4.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

CVE-2026-56151 is an improper input validation vulnerability in Kibana. An authenticated user with Fleet policy management privileges can submit a specially crafted Fleet policy input that is not properly validated. This flaw can cause a denial of service by making the Fleet agent, server, and policy management functionality unavailable.

Detection Guidance

There are no specific indicators of compromise or detection commands available for this vulnerability.

The vulnerability involves improper input validation by an authenticated user with Fleet policy management privileges submitting specially crafted inputs, which makes detection via network or system commands difficult.

Impact Analysis

This vulnerability can impact you by causing a denial of service in Kibana's Fleet management components. An attacker with low privileges and network access can disrupt the availability of Fleet agent, server, and policy management functionality, potentially interrupting critical operations that depend on these services.

Compliance Impact

The vulnerability causes a denial of service by making Fleet agent, server, and policy management functionality unavailable, impacting system availability.

However, there is no specific information provided about how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

The primary mitigation step is to upgrade Kibana to a fixed version.

Upgrade to Kibana version 8.19.17 if you are using the 8.x series.
Upgrade to Kibana version 9.3.6 if you are using the 9.x series.
Upgrade to Kibana version 9.4.3 if you are using the 9.4.x series.

No workarounds are available for users unable to upgrade.

Hi! I’m here to help you understand CVE-2026-56151. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70