CVE-2026-63137

CVE-2026-63137 is an Incorrect Authorization (CWE-863) vulnerability in Kibana that enables privilege escalation. A user with workflow edit permissions can cause scheduled workflow executions to run under the privileges of a different, higher-privileged user, gaining access to and control over da...