Elk: Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVE-2026-72659)
A vulnerability in Kibana allows authenticated users with low privileges to submit specially crafted malformed payloads to the visualization feature, causing unbounded memory allocation. This leads to the Kibana process being terminated by the host due to exhaustion of available memory, resulting in denial of service until the service is restarted. The issue affects Kibana versions 8.0.0 up to but not including 8.19.20, and 9.0.0 up to but not including 9.4.5. A patch is available to address this vulnerability.
AI Analysis
Technical Summary
CVE-2026-72659 is a resource allocation vulnerability in Kibana where requests to the visualization feature from authenticated users with low privileges are not properly validated. This allows an attacker to cause excessive memory allocation, leading to the Kibana process being terminated by the host system due to memory exhaustion. The denial of service condition persists until Kibana is restarted. The vulnerability affects Kibana versions >=8.0.0 <8.19.20 and >=9.0.0 <9.4.5. No known exploits are reported in the wild. A patch is available to fix this issue.
Potential Impact
Successful exploitation results in denial of service of the Kibana service, making it unavailable to all users until the service is restarted. This can disrupt monitoring and visualization capabilities dependent on Kibana, potentially impacting operational visibility.
Mitigation Recommendations
A patch is available for this vulnerability. Users should apply the official fix by upgrading to Kibana versions 8.19.20 or later, or 9.4.5 or later. No additional mitigation steps are indicated.
Elk: Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVE-2026-72659)
Description
A vulnerability in Kibana allows authenticated users with low privileges to submit specially crafted malformed payloads to the visualization feature, causing unbounded memory allocation. This leads to the Kibana process being terminated by the host due to exhaustion of available memory, resulting in denial of service until the service is restarted. The issue affects Kibana versions 8.0.0 up to but not including 8.19.20, and 9.0.0 up to but not including 9.4.5. A patch is available to address this vulnerability.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-72659 is a resource allocation vulnerability in Kibana where requests to the visualization feature from authenticated users with low privileges are not properly validated. This allows an attacker to cause excessive memory allocation, leading to the Kibana process being terminated by the host system due to memory exhaustion. The denial of service condition persists until Kibana is restarted. The vulnerability affects Kibana versions >=8.0.0 <8.19.20 and >=9.0.0 <9.4.5. No known exploits are reported in the wild. A patch is available to fix this issue.
Potential Impact
Successful exploitation results in denial of service of the Kibana service, making it unavailable to all users until the service is restarted. This can disrupt monitoring and visualization capabilities dependent on Kibana, potentially impacting operational visibility.
Mitigation Recommendations
A patch is available for this vulnerability. Users should apply the official fix by upgrading to Kibana versions 8.19.20 or later, or 9.4.5 or later. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BIT-kibana-2026-72659
- Osv Schema Version
- 1.6.2
- Aliases
- ["CVE-2026-72659"]
- Ecosystems
- ["Bitnami"]
- Database Specific Severity
- Medium
- Cvss Version
- null
Threat ID: 6a85b4aaacd9273b49250f02
Added to database: 08/19/2026, 13:50:34 UTC
Last enriched: 08/19/2026, 14:04:36 UTC
Last updated: 08/20/2026, 02:52:00 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.