CVE-2026-0530: Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or complete unavailability occurs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0530?
The severity of CVE-2026-0530 is considered high due to its potential to lead to excessive resource allocation.
How do I fix CVE-2026-0530?
To fix CVE-2026-0530, update to the latest secure version of Kibana as recommended by Elastic.
What are the potential impacts of CVE-2026-0530?
The potential impacts of CVE-2026-0530 include degraded performance and application crashes due to excessive resource consumption.
What versions of Kibana are affected by CVE-2026-0530?
CVE-2026-0530 affects multiple versions of Elastic Kibana, specifically those prior to the latest security update.
Is there a workaround for CVE-2026-0530?
While a comprehensive workaround is not detailed, limiting incoming requests may help reduce the risk until a patch is applied.