CVE-2026-0531: Allocation of Resources Without Limits or Throttling in Kibana Fleet
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted bulk retrieval request. This requires an attacker to have low-level privileges equivalent to the viewer role, which grants read access to agent policies. The crafted request can cause the application to perform redundant database retrieval operations that immediately consume memory until the server crashes and becomes unavailable to all users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0531?
CVE-2026-0531 is rated as a high severity vulnerability due to its potential for excessive resource allocation.
How do I fix CVE-2026-0531?
To fix CVE-2026-0531, update to the latest version of Kibana where the vulnerability has been addressed.
What type of attack does CVE-2026-0531 involve?
CVE-2026-0531 involves an attacker exploiting unchecked resource allocation through specially crafted bulk retrieval requests.
What privileges are required to exploit CVE-2026-0531?
Exploiting CVE-2026-0531 requires low-level privileges within the Kibana environment.
Which product is affected by CVE-2026-0531?
CVE-2026-0531 affects Elastic Kibana, specifically in its Fleet feature.