Medium severity4.3NVD Advisory· Published Sep 2, 2026· Updated Sep 3, 2026
CVE-2026-82293
CVE-2026-82293
Description
Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user could invoke machine learning functionality beyond their authorization scope, consuming cluster resources they should not be able to reach.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versions
>= 8.0.0, < 8.19.21+ 1 more
- (no CPE)range: >= 8.0.0, < 8.19.21
- (no CPE)range: >= 8.0.0, < 8.19.21
Patches
Vulnerability mechanics
References
1News mentions
1- Elastic Kibana: 25 Authorization and Resource Management Vulnerabilities Disclosed TogetherVypr Intelligence · Sep 3, 2026