CVE-2026-0530

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or complete unavailability occurs.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - security@elastic.co

Published

2026-01-13

Last modified

2026-01-13

Weaknesses

CWE-770

Affected products

• Kibana (Elastic)

References

• https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-03/384521