BIT-ELK-2026-72680 Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification

Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the ownership check on that identifier does not distinguish between a conversation that does not exist and one that exists but belongs to another user. As a result, an...

CVE-2026-72639

Summary: CVE-2026-72639 affects Elasticsearch highlighting handling of a user-supplied count, where there is no upper bound on the count and the resulting allocation is not bounded by a circuit breaker. An authenticated user with read privileges on a single index can trigger a single, small query...

CVE-2026-72678 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure. An authenticated user holding only read privileges can submit a single small crafted request to a product API endpoint that causes the node to...

PT-2026-71757

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description An issue exists where the software does not enforce an upper bound on a user-supplied count accepted by a search highlighting option. Because the resulting allocation is not accounted...

PT-2026-70859

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue in the aggregation framework allows an authenticated user with read-only privileges to execute write operations on collections they are not authorized to modify. This occurs...