This vulnerability arises from a confused deputy scenario in Kibana Agent Builder where a lower-privileged user editing a shared agent can trick the system into performing privileged operations as a higher-privileged user who interacts with that agent. The flaw can lead to privilege escalation, potentially granting full administrative control of Kibana and the associated Elasticsearch cluster if the attacker also has workflow authoring capabilities. The CVSS 3.1 base score is 7.3, reflecting network attack vector, low attack complexity, low privileges required, user interaction needed, and high confidentiality and integrity impact.

An attacker with non-administrative privileges who can edit shared agents can escalate privileges by causing privileged operations to be executed under a higher-privileged user's identity. This can lead to full administrative control of Kibana and the Elasticsearch cluster, compromising confidentiality and integrity of data and configurations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided. Until a patch is available, restrict editing permissions on shared agents to trusted users and limit workflow authoring capabilities to prevent privilege escalation.