CVE-2026-63259 — Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied identifiers that reference scheduled query result data …
Published: 2026-07-21 · CVSS: 4.3 · CVSS 3.1
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied identifiers that reference scheduled query result data from Kibana Spaces the requester is not authorized to access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7