CVE-2025-68386 — Kibana Improper Authorization
Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to change a document's sharing type to "global," even t…
Published: 2025-12-18 · CVSS: 4.3 · CVSS 3.1
Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to change a document's sharing type to "global," even though they do not have permission to do so, making it visible to everyone in the space via a crafted a HTTP request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7