Elastic Patches Multiple Vulnerabilities That Enables Arbitrary File Theft and DoS Attacks

Cybersecuritynews •Abinaya • January 14, 2026

Elastic has released critical security updates addressing four significant vulnerabilities across its stack, including a high-severity flaw that permits arbitrary file disclosure through compromised connector configurations. The patches resolve issues affecting file handling, input validation, and resource allocation mechanisms in Kibana and related components. The most severe vulnerability combines external file path control with server-side […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Elastic Addresses Critical Vulnerabilities Enabling File Theft and DoS Attacks Elastic has released critical security updates to address four significant vulnerabilities in its software stack. These vulnerabilities include a high-severity flaw that allows arbitrary file disclosure and could lead to denial-of-service attacks, affecting components like Kibana. The issues stem from file handling, input validation, and resource allocation mechanisms. 3 sources 26

Elastic Patches Multiple Vulnerabilities That Enables Arbitrary File Theft and DoS Attacks

The full story

Extracted Entities

Attack Types (2)

Platforms (1)