Lucene search
+L

3 matches found

OSV
OSV
•added 2026/08/13 7:13 p.m.•14 views

CVE-2026-72629 Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Space Access to Machine Learning Trained Models

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized cross-space access via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. The result is disclosure of inference output from a trained model in a different space that the user is not authoriz...

7.1CVSS5.6AI score
SaveExploits0References3
Rows per page
Query Builder