CVE-2026-82293: Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption v
Summary
A vulnerability in Kibana's machine learning feature (a tool for analyzing data patterns) allows authenticated users (people who have logged in) to access and use machine learning functions they shouldn't have permission to use, which can waste valuable computing resources. The problem stems from incorrect authorization (CWE-863, a flaw where access controls don't properly restrict who can do what), and attackers exploit misconfigured access control settings to gain unauthorized abilities.
Vulnerability Details
4.3(medium)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
network
low
low
none
September 2, 2026
Classification
Affected Vendors
Related Issues
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82293
First tracked: September 2, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 75%