CVE-2026-63259

Kibana is vulnerable to an authorization bypass that allows attackers to exploit user-controlled keys, potentially leading to unauthorized access to sensitive scheduled query result data from Kibana Spaces. This vulnerability poses a medium risk of information disclosure, making it critical for organizations using Kibana to prioritize patching and securing their instances. Security teams should assess their configurations and user permissions to mitigate the risk of unauthorized data exposure.