CVE-2026-78592

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-78592
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-78592.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-78592
Downstream
Published
2026-09-01T19:20:39.669Z
Modified
2026-09-04T08:06:33.967053Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H CVSS Calculator
Summary
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources
Details

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Kibana can lead to the unauthorized deletion of privileged resources via Path Traversal (CAPEC-126). A low-privileged user holding tag creation privileges could cause a subsequent administrative action in the tag management interface to act on an unintended target, resulting in the deletion of privileged resources including administrative accounts and other organizational assets. Exploitation requires an administrator to interact with the affected interface.

Database specific 
{
    "cwe_ids": [
        "CWE-22"
    ],
    "cna_assigner": "elastic",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "7.11.0"
                },
                {
                    "last_affected": "7.17.29"
                },
                {
                    "introduced": "8.0.0"
                },
                {
                    "last_affected": "8.19.15"
                },
                {
                    "introduced": "9.0.0"
                },
                {
                    "last_affected": "9.3.4"
                },
                {
                    "introduced": "9.4.0"
                },
                {
                    "last_affected": "9.4.1"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/78xxx/CVE-2026-78592.json"
}
References

Affected packages

Git / github.com/elastic/elasticsearch

Affected ranges

Type
GIT
Repo
https://github.com/elastic/elasticsearch
Events
Introduced
8ced7813d6f16d2ef30792e2fcde3e755795ee04
Last affected
580aff1a0064ce4c93293aaab6fcc55e22c10d1c
Introduced
1b6a7ece17463df5ff54a3e1302d825889aa1161
Fixed
0ecfe314ed6ddebb736091bf37b3b6758209b73b
Introduced
112859b85d50de2a7e63f73c8fc70b99eea24291
Fixed
7dcc32bebba091844c0207f9dae8fda6c7d08542
Introduced
2e8528e92361c3399724226deaf2b46f933e925b
Fixed
c402c2b36d90eae29c0182f86bd9050fd0b746cc
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "7.11.0"
        },
        {
            "last_affected": "7.17.29"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.19.16"
        },
        {
            "introduced": "9.0.0"
        },
        {
            "fixed": "9.3.5"
        },
        {
            "introduced": "9.4.0"
        },
        {
            "fixed": "9.4.2"
        }
    ]
}

Affected versions

v9.*
v9.4.0
v9.4.1

Database specific

vanir_signatures 
[
    {
        "target": {
            "file": "modules/apm/src/test/java/org/elasticsearch/telemetry/apm/RecordingOtelMeter.java"
        },
        "deprecated": false,
        "id": "CVE-2026-78592-a85b3975",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "23074235914325468324376590861514089586",
                "98430579598318027407692933948030043385",
                "187050963769246900287150112416544450660",
                "214623411764654173647043302652335395077",
                "176453353204044914242382593509038157485",
                "213515830173899733296977817562856718047"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/elastic/elasticsearch/commit/0ecfe314ed6ddebb736091bf37b3b6758209b73b"
    },
    {
        "target": {
            "file": "modules/apm/src/test/java/org/elasticsearch/telemetry/apm/RecordingOtelMeter.java"
        },
        "deprecated": false,
        "id": "CVE-2026-78592-d726701b",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "23074235914325468324376590861514089586",
                "98430579598318027407692933948030043385",
                "187050963769246900287150112416544450660",
                "214623411764654173647043302652335395077",
                "176453353204044914242382593509038157485",
                "213515830173899733296977817562856718047"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/elastic/elasticsearch/commit/7dcc32bebba091844c0207f9dae8fda6c7d08542"
    },
    {
        "target": {
            "file": "modules/apm/src/test/java/org/elasticsearch/telemetry/apm/RecordingOtelMeter.java"
        },
        "deprecated": false,
        "id": "CVE-2026-78592-edd41f68",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "23074235914325468324376590861514089586",
                "98430579598318027407692933948030043385",
                "187050963769246900287150112416544450660",
                "214623411764654173647043302652335395077",
                "176453353204044914242382593509038157485",
                "213515830173899733296977817562856718047"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/elastic/elasticsearch/commit/c402c2b36d90eae29c0182f86bd9050fd0b746cc"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-78592.json"
vanir_signatures_modified 
"2026-09-04T08:06:33Z"

Git / github.com/elastic/kibana

Affected ranges

Type
GIT
Repo
https://github.com/elastic/kibana
Events
Introduced
3f71ce7177a41e067ddb1e670ec4ace5f6d4f5fe
Last affected
f6e2f2e44cc0a6a11435f1b6350f735e23bef4b4
Introduced
57ca5e139a33dd2eed927ce98d8231a1f217cd15
Fixed
209c12d77d1bf1bc561abff2b91aa95f354734a3
Introduced
504d6bfa94cca17fabb76e06152c30c4f0c3efdd
Fixed
db396449a69d0613b0b4dc8b8e9789aa35504e0f
Introduced
b2e39752e03b56f48f51943214475ddba1f8e974
Fixed
ca34dedcfe614964fe236c237a023021da0a8665
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "7.11.0"
        },
        {
            "last_affected": "7.17.29"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.19.16"
        },
        {
            "introduced": "9.0.0"
        },
        {
            "fixed": "9.3.5"
        },
        {
            "introduced": "9.4.0"
        },
        {
            "fixed": "9.4.2"
        }
    ]
}

Affected versions

v9.*
v9.4.0
v9.4.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-78592.json"