CVE-2026-72641
Undergoing Analysis Undergoing Analysis - In Progress

Incorrect Authorization in Kibana Leading to Task Modification

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Elastic

Description
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user holding only Security Solution read access in a Kibana space could enumerate and change the state of Entity Store maintainer tasks, silently disabling Entity Analytics maintenance for that space.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-02
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-72641
EUVD
EUVD-2026-69565

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
elastic kibana From 9.4.0 (inc) to 9.4.5 (inc)
elastic kibana 9.5.0
elastic kibana 9.4.6
elastic kibana 9.5.1
elastic kibana *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-72641 is an Incorrect Authorization vulnerability in Kibana versions 9.4.0 through 9.4.5 and 9.5.0. It allows an authenticated user with only Security Solution read access in a Kibana space to enumerate and modify Entity Store maintainer tasks, potentially disabling Entity Analytics maintenance for that space.

Detection Guidance

Check Kibana version with command: curl -XGET 'localhost:5601/api/console/api_server?path=info&method=GET' | grep version. If version is between 9.4.0-9.4.5 or 9.5.0, the system is vulnerable.

Impact Analysis

An attacker with limited access could silently disable Entity Analytics maintenance in a Kibana space, disrupting data processing and analytics capabilities. This could lead to incomplete or missing data insights for affected users.

Compliance Impact

This vulnerability could impact compliance by potentially allowing unauthorized modifications to data processing tasks, which may violate integrity requirements in GDPR or HIPAA. However, no direct compliance impact is specified in the provided context.

Mitigation Strategies

Upgrade Kibana to version 9.4.6 or 9.5.1 immediately. If upgrading is not possible, restrict access to Kibana spaces and monitor for unauthorized task modifications.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72641. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart