{"data":{"id":"f944cc3f-4a92-46b0-9a63-633c4333e2aa","title":"CVE-2026-82293: Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption v","summary":"A vulnerability in Kibana's machine learning feature (a tool for analyzing data patterns) allows authenticated users (people who have logged in) to access and use machine learning functions they shouldn't have permission to use, which can waste valuable computing resources. The problem stems from incorrect authorization (CWE-863, a flaw where access controls don't properly restrict who can do what), and attackers exploit misconfigured access control settings to gain unauthorized abilities.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-82293","publishedAt":"2026-09-02T15:17:43.157Z","cveId":"CVE-2026-82293","cweIds":["CWE-863"],"cvssScore":"4.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Kibana"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-02T15:17:43.157Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability","integrity"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.75,"researchCategory":null,"atlasIds":null}}