CVE-2026-26936
Inefficient Regular Expression Complexity in Kibana Leading to Denial of Service
Summary
Inefficient Regular Expression Complexity in Kibana Leading to Denial of Service
Original description
The description as published by the source.
Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup (CAPEC-492).
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.19.11"},{"introduced":"9.0.0"},{"fixed":"9.2.5"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.19.11"},{"introduced":"9.0.0"},{"fixed":"9.2.5"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co