Security Advisory
CVE-2026-78593
4.3
MEDIUM
Vulnerability Description
An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond the caller's authorized Elasticsearch permissions.
Published Date
September 3, 2026
Official Source
NIST NVD Advisory