This vulnerability in Kibana Agent Builder allows a non-admin user with edit access to a shared agent to escalate privileges by causing privileged operations to be performed as a higher-privileged user who interacts with that agent. The flaw is classified as CWE-441 (Unintended Proxy or Intermediary, also known as 'Confused Deputy'). When combined with workflow authoring capabilities, the attacker can gain full administrative control over Kibana and the underlying Elasticsearch cluster. The CVSS 3.1 base score is 7.3, indicating high severity, with network attack vector, low attack complexity, requiring privileges and user interaction, and impacts confidentiality and integrity but not availability.

Successful exploitation can lead to privilege escalation from a non-administrative user to full administrative control of Kibana and the Elasticsearch cluster. This compromises confidentiality and integrity of the system but does not affect availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or official fixes are provided, users should monitor Elastic's advisories for updates. Until a fix is available, restrict edit access to shared agents and limit workflow authoring permissions to trusted users to reduce risk.