CVE-2026-72671: A Kibana Machine Learning capability that removes a saved object from the current space accepts machine learning trained

A security flaw in Kibana (Elastic's data visualization tool) Machine Learning allows users to remove trained models (pre-built AI models) from a workspace if they have permission to create certain types of jobs, even if they shouldn't have that permission. The actual model isn't deleted and can be restored by someone with proper access, but this is still a privilege escalation vulnerability (a situation where someone gains more control than they should have).