CVE-2026-0530
Fixed in a distro release EPSS <1%CVSS 6.5
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or complete unavailability occurs.
Products: Elastic Kibana
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | kibana-8.17-bitnami | 8.17.10-r11 |
| Chainguard | kibana-8.18-bitnami | 8.18.8-r10 |