Elk: Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVE-2026-72653)
CVE-2026-72653 is a medium severity vulnerability in Kibana where an authenticated user authorized to manage maintenance windows can submit a specially crafted payload that causes excessive resource allocation. This leads to denial of service as the Kibana process becomes unresponsive and requires manual intervention to recover. The issue affects multiple Kibana versions from 8.12.0 up to but not including 8.19.19, 9.0.0 up to 9.3.8, and 9.4.0 up to 9.4.4. A patch is available to address this vulnerability.
AI Analysis
Technical Summary
This vulnerability involves allocation of resources without limits or throttling (CWE-770) in Kibana, which can be exploited by an authenticated user with maintenance window management permissions. By submitting a malformed payload, the attacker causes the Kibana process to consume excessive resources, resulting in denial of service (CAPEC-130). The affected versions include >=8.12.0 <8.19.19, >=9.0.0 <9.3.8, and >=9.4.0 <9.4.4. The vulnerability does not have a CVSS score but is rated medium severity. No known exploits in the wild have been reported. A patch is available to mitigate this issue.
Potential Impact
An authenticated user authorized to manage maintenance windows can cause Kibana to consume excessive system resources, making the service unresponsive to all users. Recovery requires manual intervention, resulting in potential downtime and disruption of service availability.
Mitigation Recommendations
A patch is available for this vulnerability. Users should apply the official fixes for affected Kibana versions to prevent exploitation. Since this is not a cloud service, remediation requires updating the affected Kibana installations. No additional mitigations are specified.
Elk: Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVE-2026-72653)
Description
CVE-2026-72653 is a medium severity vulnerability in Kibana where an authenticated user authorized to manage maintenance windows can submit a specially crafted payload that causes excessive resource allocation. This leads to denial of service as the Kibana process becomes unresponsive and requires manual intervention to recover. The issue affects multiple Kibana versions from 8.12.0 up to but not including 8.19.19, 9.0.0 up to 9.3.8, and 9.4.0 up to 9.4.4. A patch is available to address this vulnerability.
Affected software
pkg:bitnami/kibanaRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves allocation of resources without limits or throttling (CWE-770) in Kibana, which can be exploited by an authenticated user with maintenance window management permissions. By submitting a malformed payload, the attacker causes the Kibana process to consume excessive resources, resulting in denial of service (CAPEC-130). The affected versions include >=8.12.0 <8.19.19, >=9.0.0 <9.3.8, and >=9.4.0 <9.4.4. The vulnerability does not have a CVSS score but is rated medium severity. No known exploits in the wild have been reported. A patch is available to mitigate this issue.
Potential Impact
An authenticated user authorized to manage maintenance windows can cause Kibana to consume excessive system resources, making the service unresponsive to all users. Recovery requires manual intervention, resulting in potential downtime and disruption of service availability.
Mitigation Recommendations
A patch is available for this vulnerability. Users should apply the official fixes for affected Kibana versions to prevent exploitation. Since this is not a cloud service, remediation requires updating the affected Kibana installations. No additional mitigations are specified.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BIT-kibana-2026-72653
- Osv Schema Version
- 1.6.2
- Aliases
- ["CVE-2026-72653"]
- Ecosystems
- ["Bitnami"]
- Database Specific Severity
- Medium
- Cvss Version
- null
Threat ID: 6a85b4aaacd9273b49250f08
Added to database: 08/19/2026, 13:50:34 UTC
Last enriched: 08/19/2026, 14:05:24 UTC
Last updated: 08/20/2026, 02:52:00 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.