CVE-2026-72644: CWE-248 Uncaught Exception in Elastic Kibana
Description
Uncaught Exception (CWE-248) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error condition, terminating the Kibana process and denying service to all users and spaces on that instance until it is restarted.
CVSS v3.1
Score 6.5medium
Affected software
Elastic
Kibana
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-248) in Kibana allows an authenticated user with minimal privileges to cause an unhandled exception by submitting specially crafted input to the Observability AI Assistant feature. The unhandled exception crashes the Kibana process, causing a denial of service condition. The CVSS score is 6.5 (medium severity) with network attack vector, low complexity, requiring low privileges, no user interaction, and impact limited to availability only. No patch or official remediation level is currently indicated, and no known exploits are reported in the wild.
Potential Impact
Successful exploitation results in denial of service by terminating the Kibana process, disrupting availability for all users and spaces on the instance until it is restarted. There is no confidentiality or integrity impact reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Observability AI Assistant feature to trusted users and monitor for abnormal process terminations. Restarting the Kibana process restores service after a crash.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- elastic
- Date Reserved
- 2026-08-10T11:17:35.481Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a972606acd9273b491915c4
Added to database: 09/01/2026, 19:22:46 UTC
Last enriched: 09/07/2026, 14:19:31 UTC
Last updated: 10/15/2026, 06:48:18 UTC
Views: 53
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.