EUVD-2026-58220

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72631

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72631 Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72631

Kibana Fleet vulnerability CVE-2026-72631: Improper Privilege Management can allow an Elastic Agent API key issued to agents in a policy to gain additional write rights (insert new documents and extend index mappings) for certain indices by including extra data streams in the integration policy. ...

CVE-2026-72666

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized query execution against Elastic Agents that are assigned to a Kibana space the requesting user has no access to, via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A user who is authoriz...

Kibana 9.4.5, 9.5.1 Security Update (ESA-2026-128)

Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys Description: Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: kaf, backup-restore-operator, zitadel, omnictl-multiarch, containerd, omnictl-multiarch-fips, zot, aactl, kots, reports-server, terraform, prometheus, loki, cert-manager, telegraf, cilium, prometheus-operator, spire-server, snyk-cli, prometheus-mongodb-exporter, k3d,...

GHSA-PJV4-3C63-699F vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

CVE-2026-42602 vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

GHSA-HJ4R-2C9C-29H3 vulnerabilities

Vulnerabilities for packages: apm-server-fips, cloudbeat, elastic-agent, cloudbeat-fips, elastic-agent-fips, apm-server...

CVE-2023-49922 vulnerabilities

Vulnerabilities for packages: apm-server-fips, cloudbeat, elastic-agent, cloudbeat-fips, elastic-agent-fips, apm-server...

CVE-2026-48496 vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

GHSA-F2R5-5M7W-P5CX vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kaf, gitlab-kas, drone, omnictl-multiarch, omnictl-multiarch-fips, tekton-pipelines-fips, zot, kots, k9s-fips, reports-server, terraform, tigera-operator, knative-kafka-broker-fips, argo-cd-fips, etcd-fips, argocd-image-updater, trivy-fips, gitea, mattermost-fips,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: juicefs, yunikorn-k8shim-fips, agentbeat, zot, ratify, terraform, rclone-fips, kyverno-notation-aws-fips, gitlab-runner, cert-manager-csi-driver, gitea, beats, seaweedfs-rocksdb-fips, percona-server-mongodb-operator-fips, k6, trufflehog, cloudbeat, teleport,...

CVE-2026-33817 vulnerabilities

Vulnerabilities for packages: containerd, consul, grafana-fips, zot, datadog-agent, consul-fips, datadog-agent-fips, rke2-runtime-fips, rke2-runtime, loki, commercial-grafana, mattermost-fips, beats, frankenphp-8.4, cloudbeat, vault, frankenphp-8.5, kine, cloudbeat-fips, elastic-agent-fips,...

GHSA-6JWV-W5XF-7J27 vulnerabilities

Vulnerabilities for packages: containerd, consul, grafana-fips, zot, datadog-agent, consul-fips, datadog-agent-fips, rke2-runtime-fips, rke2-runtime, loki, commercial-grafana, mattermost-fips, beats, frankenphp-8.4, cloudbeat, vault, frankenphp-8.5, kine, cloudbeat-fips, elastic-agent-fips,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, nrdot-collector-k8s-fips, crossplane-provider-aws-ec2, crossplane-provider-aws-firehose-fips, crossplane-provider-aws-efs, crossplane-provider-aws-ecs, crossplane-provider-aws-route53-fips, grafana-alloy,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, nrdot-collector-k8s-fips, crossplane-provider-aws-ec2, crossplane-provider-aws-firehose-fips, crossplane-provider-aws-efs, crossplane-provider-aws-ecs, crossplane-provider-aws-route53-fips, grafana-alloy,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: databricks-cli-fips, kubernetes-dashboard-auth, kaf, redpanda, prometheus-pushgateway-fips, k6-operator, flux-image-reflector-controller-fips, conftest-fips, kyverno-notation-aws-fips, conftest, crossplane-provider-aws-firehose-fips, knative-net-istio-fips,...