{"data":{"id":"4073a002-ad8c-4fb2-9e6e-1807498092d0","title":"CVE-2026-78598: Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to information disclosure via Exploiti","summary":"A flaw in Kibana's machine learning feature allows an authenticated user with job management privileges in one space (an isolated area in Kibana) to accidentally make a job's saved object accessible across all spaces in the system, even if they don't have permission to access those other spaces. This could expose sensitive information to users who shouldn't see it.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-78598","publishedAt":"2026-09-02T15:17:40.863Z","cveId":"CVE-2026-78598","cweIds":["CWE-863"],"cvssScore":"5.4","cvssSeverity":"medium","severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Elastic","Kibana"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-02T15:17:40.863Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.75,"researchCategory":null,"atlasIds":null}}