CVE-2026-26940
Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service
Summary
Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service
Original description
The description as published by the source.
Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series data properties with an excessively large quantity value.
References
- advisory github.com
- advisory nvd.nist.gov
- web discuss.elastic.co