CVE-2026-78581

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-78581
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-78581.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-78581
Aliases
Published
2026-08-25T13:08:11Z
Modified
2026-09-04T08:06:28Z
Severity
  • 4.2 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana
Details

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier to access or modify a conversation they do not own. Successful exploitation requires knowledge of a hard-to-guess identifier.

Database specific 
{
    "cna_assigner":  "elastic",
    "cwe_ids":  [
        "CWE-639"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/78xxx/CVE-2026-78581.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "8.0.0"
                },
                {
                    "last_affected":  "8.16.2"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/elastic/elasticsearch

Affected ranges

Type
GIT
Repo
https://github.com/elastic/elasticsearch
Events
Introduced
1b6a7ece17463df5ff54a3e1302d825889aa1161
Fixed
2eb78bceb86e182dc8f45ab76a704b1bfd352c9d
Introduced
2b6a7fed44faa321997703718f07ee0420804b41
Fixed
747663ddda3421467150de0e4301e8d4bc636b0c
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "8.0.0"
        },
        {
            "fixed":  "8.16.3"
        },
        {
            "introduced":  "8.17.0"
        },
        {
            "fixed":  "8.17.2"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

v8.*
v8.17.0
v8.17.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-78581.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "263356833667147417207880542417020229118",
            "length":  346
        },
        "id":  "CVE-2026-78581-19a84879",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/elastic/elasticsearch/commit/747663ddda3421467150de0e4301e8d4bc636b0c",
        "target":  {
            "file":  "server/src/main/java/org/elasticsearch/index/mapper/ObjectMapper.java",
            "function":  "setIgnoredValues"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "168799588092401371349937989380744438042",
                "242259272325545759304556204886294254385",
                "78134022479182254435201794946905021050"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-78581-b11c30a6",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/elastic/elasticsearch/commit/747663ddda3421467150de0e4301e8d4bc636b0c",
        "target":  {
            "file":  "server/src/test/java/org/elasticsearch/index/mapper/IgnoredSourceFieldMapperTests.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "241650658189941592068922497856645279704",
                "245410000860545525443509860004509825878",
                "289885912327545093624921847601875478957",
                "56515432158717916672434292238886754568"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-78581-c2961f10",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/elastic/elasticsearch/commit/747663ddda3421467150de0e4301e8d4bc636b0c",
        "target":  {
            "file":  "server/src/main/java/org/elasticsearch/index/mapper/ObjectMapper.java"
        }
    }
]
vanir_signatures_modified 
"2026-09-04T08:06:28Z"

Git / github.com/elastic/kibana

Affected ranges

Type
GIT
Repo
https://github.com/elastic/kibana
Events
Introduced
57ca5e139a33dd2eed927ce98d8231a1f217cd15
Fixed
dcb19b0aa33b03224c55afabee0c5fdd03a6c572
Introduced
86cbc85e621f4f3f701ed230f4e859ac5a80145b
Fixed
d7985c80643203de533d99844eb1b53cae85f8f9
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "8.0.0"
        },
        {
            "fixed":  "8.16.3"
        },
        {
            "introduced":  "8.17.0"
        },
        {
            "fixed":  "8.17.2"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

v8.*
v8.17.0
v8.17.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-78581.json"