CyberRota Analysis
AI-GeneratedFleet Server is vulnerable to code injection due to improper validation of output configuration identifiers, allowing attackers to execute arbitrary scripts through crafted input. This vulnerability can lead to unauthorized actions on the server, potentially compromising the integrity and security of the system. Organizations utilizing Fleet Server should prioritize remediation to mitigate the risk of exploitation.
Original NVD Description
Improper Control of Generation of Code ('Code Injection') (CWE-94) in Fleet Server can lead to the execution of attacker-supplied script content via Code Injection (CAPEC-242). Kibana accepted an identifier for an output configuration without restricting it to safe characters. That identifier is later placed into a server-side script that Fleet Server builds as part of routine agent policy processing, so script syntax embedded in the identifier became part of the script that was executed rather than being treated as data.