CVE-2026-56151 Improper Input Validation in Kibana Leading to Denial of Service
An authenticated user can cause a denial of service in Kibana Fleet management by submitting improperly validated policy inputs.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-56151?
CVE-2026-56151 is a medium-severity denial of service vulnerability in Elastic Kibana, published on 1 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Improper Input Validation (CWE-20) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authenticated user can submit a specially crafted Fleet policy input that is not correctly validated, which can render Fleet agent, server, and policy management functionality unavailable.
Weakness: CWE-20
Which versions are affected by CVE-2026-56151?
It affects 1 product.
Products include Elastic Kibana.
How do I fix CVE-2026-56151?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-56151 being exploited?
There is no known exploitation of CVE-2026-56151 in the wild and no public exploit code.
Other vulnerabilities in Elastic Kibana
Sources
Also known as GHSA-rvxp-jqfr-h65p, MINI-354g-p288-q9xp, MINI-55v6-fm9j-27mf, MINI-6wfm-6p4v-769x, MINI-fjr9-7q59-6j4v, MINI-j7hg-96j7-8xx4 and 2 more.