CVE-2026-63262

Kibana is vulnerable due to a missing authorization flaw that allows unauthorized cross-space information disclosure through user-supplied input, bypassing space-level access controls. This could potentially expose sensitive data to users who should not have access to it. Organizations utilizing Kibana should prioritize addressing this vulnerability to mitigate risks related to data exposure and ensure proper access controls are enforced.