Insertion of Sensitive Information into Log File

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the APM instrumentation. An attacker can obtain sensitive information by...

CVE-2026-49088: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File CWE-532 in Kibana can lead to information disclosure. When the optional application performance monitoring APM instrumentation is enabled, sensitive request header values could be recorded in application logs, where they may be accessible to...