https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 07:26:50 +0000 https://db.gcve.eu/vuln/bit-elk-2026-72681 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> https://db.gcve.eu/vuln/bit-elk-2026-72681 https://db.gcve.eu/vuln/certfr-2026-avi-1020 certfr-2026-avi-1020 https://db.gcve.eu/vuln/certfr-2026-avi-1020 https://db.gcve.eu/vuln/fkie_cve-2026-72681 <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> https://db.gcve.eu/vuln/fkie_cve-2026-72681 https://db.gcve.eu/vuln/ghsa-9fww-g6xw-7wv9 <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> https://db.gcve.eu/vuln/ghsa-9fww-g6xw-7wv9