CVE-2025-25014

No fix known EPSS 22%CVSS 9.1

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.

Published 2025-05-06 · CVE record · OSV

Products: Elastic Kibana