CVE-2026-42398: Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access
Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42398?
The severity of CVE-2026-42398 is high with a score of 7.7.
What type of vulnerability is CVE-2026-42398?
CVE-2026-42398 is a Server-Side Request Forgery (SSRF) vulnerability in Kibana.
How does CVE-2026-42398 affect Kibana?
CVE-2026-42398 allows authenticated users with connector management privileges to bypass the connection allowlist.
What users are impacted by CVE-2026-42398?
Authenticated users with connector management privileges are impacted by CVE-2026-42398.
How can I mitigate the risks of CVE-2026-42398?
Mitigation for CVE-2026-42398 involves ensuring proper configuration and limiting privileges for connector management in Kibana.