CVE-2025-68422 — Kibana Improper Authorization
Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to bypass intended permission restrictions via a crafte…
Published: 2025-12-18 · CVSS: 4.3 · CVSS 3.1
Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to bypass intended permission restrictions via a crafted HTTP request. This allows an attacker who lacks the live queries - read permission to successfully retrieve the list of live queries.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7