Elk: Incorrect Authorization in Kibana Leading to Denial of Service (CVE-2026-82298)

This vulnerability in Kibana involves incorrect authorization (CWE-863), which can be exploited by attackers to cause denial of service through misconfigured access control security levels (CAPEC-180). The CVSS 3.1 vector indicates the attack requires network access with low complexity, privileges required are low, no user interaction is needed, and the impact is limited to availability loss. No integrity or confidentiality impact is reported. There is no vendor advisory or patch information provided at this time.

An attacker with low privileges can exploit the incorrect authorization to cause denial of service, impacting the availability of the Kibana service. There is no impact on confidentiality or integrity. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and correct access control configurations to ensure proper authorization enforcement to mitigate potential denial of service.