PT-2026-44537 · Elastic · Elasticsearch+1

Ismisepaul + 1 · Published 2026-05-28 · Updated 2026-06-01 · CVE-2026-49095

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description Improper input validation in the Kibana Fleet agent policy management feature allows an authenticated user with Fleet management privileges to escalate privileges. By injecting values into a configuration override mechanism that lacks adequate validation, an attacker can cause Elastic Agents to be issued API keys with elevated Elasticsearch privileges. This may grant unauthorized read and write access to sensitive Elasticsearch security indices, exceeding the intended permissions of the Fleet management role.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BIT-ELK-2026-49095

BIT-KIBANA-2026-49095

CVE-2026-49095

Affected Products

Elasticsearch

Kibana

References · 4

• https://discuss.elastic.co/t/kibana-fleet-8-19-16-9-3-5-and-9-4-2-security-update-esa-2026-38/386559 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-49095 · Security Note
• https://osv.dev/vulnerability/BIT-elk-2026-49095 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-kibana-2026-49095 · Vendor Advisory