CVE-2026-72651

Kibana is vulnerable to a denial of service due to improper resource allocation, allowing an authenticated user with read-only privileges to exploit this flaw by submitting a specially crafted payload. This can lead to excessive resource consumption, rendering the Kibana instance unable to serve requests for all users until the process is restarted. Organizations using Kibana, particularly those with user roles that include read-only access to alerting features, should prioritize addressing this vulnerability to maintain service availability.