CVE-2026-72675: Missing Authorization (CWE-862) in Kibana can lead to cross-space information disclosure and unauthorized data modificat

Kibana (a data visualization tool) has a missing authorization bug where its Machine Learning feature doesn't properly filter data between spaces (isolated work areas). This means operations from one space could access and modify machine learning data from all other spaces in the system, causing unauthorized information disclosure and data changes.