A deserialization vulnerability in Kibana allows arbitrary code execution when parsing a maliciously crafted YAML document. Exploitation requires a user to have specific Elasticsearch indices privileges (write on .kibana_ingest system indices with allow_restricted_indices set to true) combined with certain Kibana privileges under Fleet or Integration, or access via the Fleet Server’s service account token. The affected Kibana versions are from 8.10.0 up to but not including 8.15.1. This vulnerability is rated critical due to the potential for arbitrary code execution. A patch is available to address this issue.