Threats tagged 'ghsa-47v6-p68m-hr3x'

CVE-2026-115292 is an authorization bypass vulnerability in Kibana Machine Learning. An authenticated user with read access to Machine Learning in one Kibana space can access audit and error messages of data frame analytics jobs in other spaces without proper authorization. These messages may disclose sensitive job details such as destination index names, analyzed field names, and failure information. The vulnerability is rated medium severity with a CVSS score of 4.3.