CVE-2026-63261: Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-63261 is a vulnerability in Kibana where a low-privileged authenticated user can send a specially crafted request to the machine learning feature, causing uncontrolled resource consumption (where a system uses up memory or processing power without limits) that exhausts available memory and makes the server unavailable to all users, known as a denial of service attack. This vulnerability has a CVSS 4.0 severity rating (a 0-10 scale measuring how serious a vulnerability is).