EUVD-2026-33035
GHSA-qf29-h8cg-2hg4
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Network-reachable SSRF requiring an authenticated connector-management account (PR:L), no user interaction, scope change to internal targets (S:C) with confidentiality-only impact (C:H, I:N/A:N).
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionNVD
Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.
AnalysisAI
Server-Side Request Forgery in Elastic Kibana 9.3.0 through 9.3.2 lets an authenticated user holding connector management privileges override the operator-configured connector allowlist and force the Kibana server to make outbound requests to destinations that egress controls were meant to block. Because the request originates from the trusted server, an attacker can reach internal or otherwise restricted network services and exfiltrate their responses. EPSS is very low (0.03%, 9th percentile) and there is no public exploit identified at time of analysis, but the scope-changing CVSS 7.7 rating reflects meaningful confidentiality impact against internal assets.
Technical ContextAI
Kibana is the visualization and management front-end of the Elastic Stack; its Actions/Connectors framework lets it issue outbound HTTP requests to external systems (webhooks, incident-management tools, LLM/email endpoints, etc.) as part of alerting and automation. Operators can restrict where connectors are allowed to send traffic via an egress/URL allowlist so the server cannot be abused as a pivot. This flaw is a classic CWE-918 Server-Side Request Forgery: the allowlist validation can be bypassed by a user with connector management rights, so the server-side request logic honors an attacker-influenced destination instead of the policy-approved one. The vulnerable code path is the connector configuration/execution layer where the destination URL is validated against the operator allowlist before Kibana dispatches the request. Affected component per CPE: cpe:2.3:a:elastic:kibana.
RemediationAI
Vendor-released patch: upgrade to Kibana 9.3.3, which contains the fix per Elastic advisory ESA-2026-40 (https://discuss.elastic.co/t/kibana-9-3-3-security-update-esa-2026-40/386562). Until you can upgrade, restrict who holds connector management privileges to a minimal set of fully trusted operators, since exploitation requires that role - review and revoke delegated connector-management access for lower-trust or multi-tenant users, accepting the trade-off that those users can no longer create or edit connectors. As a network-layer compensating control, enforce the egress restriction outside Kibana by placing the Kibana server behind an outbound proxy or firewall that limits permitted destinations, so an in-app allowlist bypass still cannot reach internal services; the side effect is that legitimate connectors to new destinations must be whitelisted at the proxy. Do not rely on the in-application connector allowlist alone on affected versions.
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. Rated criti
Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. Rated hig
Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. Rated critical s
Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP
Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are us
A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine lea
Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. Rated critical sever
Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal. Rate
Privilege escalation in Elastic Kibana's Agent Builder component (versions 9.4.0-9.4.3) allows authenticated low-privile
A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document con
Kibana version 8.7.0 contains an arbitrary code execution flaw. Rated high severity (CVSS 8.8), this vulnerability is re
Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. Rated high severity (CVSS 8.8), this vulne
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today