Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
Kibana and OpenSearch Dashboards fixed to stop data exposure
published 1 month ago
Summary
Older versions of Kibana and OpenSearch Dashboards could allow unauthorized users to view or modify data. The problem is corrected in the newest releases of these products. Upgrade to the latest versions to keep your data safe.
What to do
- Update cleanstart kibana to version 9.3.2-r3.
- Update cleanstart opensearch-dashboards-fips to version 2.19.5-r0.
- Update cleanstart opensearch-dashboards-fips to version 3.5.0-r1.
- Update kibana to version 9.3.2-r3.
- Update opensearch-dashboards-fips to version 2.19.5-r0.
- Update opensearch-dashboards-fips to version 3.5.0-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | kibana |
< 9.3.2-r3 Fix: upgrade to 9.3.2-r3
|
| CleanStart | cleanstart | opensearch-dashboards-fips |
< 2.19.5-r0 < 3.5.0-r1 Fix: upgrade to 2.19.5-r0
|
| CleanStart | – | kibana |
< 9.3.2-r3 Fix: upgrade to 9.3.2-r3
|
| CleanStart | – | opensearch-dashboards-fips |
< 2.19.5-r0 < 3.5.0-r1 Fix: upgrade to 2.19.5-r0
|
Original advisory text
Security fix for GHSA-6chq-wfr3-2hj9 applied in: kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1
GHSA-6chq-wfr3-2hj9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.
Severity
7.4
High
Timeline
Published18 Sep 2026
Updated15 Oct 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-XK85655 · OSV
Track software like this
Free during beta