Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.7
Kibana Workflows Can Allow Attackers to Read Server Files
CVE-2026-26938
Summary
Kibana's workflows feature has a security issue that could let an authenticated user with the right permissions read sensitive files from the server. This could allow an attacker to access information they shouldn't have. To stay secure, update to the latest version of Kibana as soon as possible.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| elastic | kibana | 9.3.0 | – |
Original title
Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesyste...
Original description
Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery (SSRF) via Code Injection (CAPEC-242). This requires an authenticated user who has the workflowsManagement:executeWorkflow privilege.
nvd CVSS3.1
7.7
Vulnerability type
CWE-1336
Published: 26 Feb 2026 · Updated: 12 Mar 2026 · First seen: 6 Mar 2026