PT-2026-31335 · Elastic · Kibana+1

Ismisepaul + 1 · CVE-2026-4498 · Published 2026-04-08 · Updated 2026-07-25

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description Execution with unnecessary privileges in the debug route handlers of the Fleet plugin allows an authenticated user to read index data beyond their direct Elasticsearch RBAC (Role-Based Access Control) scope. This issue occurs when a user possesses Fleet sub-feature privileges, such as those for agents, agent policies, and settings management, enabling them to abuse these privileges to access unauthorized data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-250

Related Identifiers

BIT-ELK-2026-4498

BIT-KIBANA-2026-4498

CVE-2026-4498

Affected Products

Fleet

Kibana

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4498.json · Exploit
• https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-21/385811 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-kibana-2026-4498 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-4498 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4498 · Security Note
• https://osv.dev/vulnerability/BIT-elk-2026-4498 · Vendor Advisory
• https://twitter.com/CVEnew/status/2041975636063920466 · Twitter Post
• https://t.me/CVEtracker/50077 · Telegram Post
• https://t.me/cveNotify/222955 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2041939667424051485 · Twitter Post