CVE-2026-72651

Received Received - Intake

Allocation of Resources Without Limits in Kibana

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Elastic

Description

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with read-only privileges to the alerting feature could submit a specially crafted, malformed payload that causes the Kibana process to consume excessive resources. A single request is sufficient to leave Kibana unable to serve requests for all users until the process is restarted.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-13

Generated

2026-08-14

AI Q&A

2026-08-14

EPSS Evaluated

N/A

NVD

CVE-2026-72651

EUVD

EUVD-2026-58276

Affected Vendors & Products

Vendor	Product	Version / Range
elastic	kibana	*
elastic	kibana	From 8.0.0 (inc) to 8.19.19 (inc)
elastic	kibana	From 9.0.0 (inc) to 9.4.4 (inc)
elastic	kibana	8.19.20
elastic	kibana	9.4.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

CVE-2026-72651 is an Allocation of Resources Without Limits or Throttling vulnerability in Kibana. An authenticated user with read-only access to the alerting feature can submit a specially crafted payload that causes the Kibana process to consume excessive resources, leading to a denial of service. A single request can make Kibana unable to serve requests until restarted.

Detection Guidance

Monitor Kibana process resource usage for sudden spikes in CPU or memory consumption. Check logs for excessive allocation errors or malformed payload submissions in the alerting feature. Use system monitoring tools like top, htop, or ps to track Kibana process behavior.

Impact Analysis

This vulnerability can impact you by causing Kibana to become unresponsive or crash due to excessive resource consumption. This results in a denial of service, preventing all users from accessing Kibana until the process is restarted. It requires an authenticated user with read-only privileges to exploit.

Mitigation Strategies

Upgrade Kibana to version 8.19.20 or 9.4.5 immediately. If upgrading is not possible, restrict access to the alerting feature for all users, especially those with read-only privileges. Monitor network traffic for suspicious payload submissions targeting the alerting endpoint.

Hi! I’m here to help you understand CVE-2026-72651. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70