Security Advisory

CVE-2026-63137

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-01 19:20:14

Last updated 2026-09-02 03:55:57

Assigner elastic

CVSS score 8.3

State PUBLISHED

Description

Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). A user holding workflow edit permissions could cause scheduled workflow executions to run with the privileges of a different, higher-privileged user, allowing access to and modification of data beyond their own authorization scope.

← Browse all CVEs View on cve.org ↗