CVE-2026-33463

Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure. A logic error in how expiration timestamps were validated allowed a time-bounded access token to remain usable beyond its intended validity window, enabling an unauthenticated actor in possession of the token to retrieve the associated content after expiration.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://discuss.elastic.co/t/8-19-16-9-3-5-security-update-esa-2026-33/386551	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:elastic:kibana::::::::
	cpe:2.3:a:elastic:kibana::::::::

History

14 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Operación en un Recurso después de la Expiración o Terminación (CWE-672) en Kibana puede llevar a una revelación de información no autorizada. Un error lógico en cómo se validaban las marcas de tiempo de expiración permitió que un token de acceso con límite de tiempo permaneciera utilizable más allá de su ventana de validez prevista, permitiendo a un actor no autenticado en posesión del token recuperar el contenido asociado después de la expiración.

Information

Published : 2026-05-28 20:16

Updated : 2026-10-14 20:10

NVD link : CVE-2026-33463

Mitre link : CVE-2026-33463

CVE.ORG link : CVE-2026-33463

JSON object : View

Products Affected

elastic

kibana

CWE

CWE-672

Operation on a Resource after Expiration or Release

{"id": "CVE-2026-33463", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-33463", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-29T15:44:23.051928Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@elastic.co", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@elastic.co", "affectedData": [{"vendor": "Elastic", "product": "Kibana", "versions": [{"status": "affected", "version": "8.0.0", "versionType": "semver", "lessThanOrEqual": "8.19.15"}, {"status": "affected", "version": "9.0.0", "versionType": "semver", "lessThanOrEqual": "9.3.4"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-28T20:16:22.917", "references": [{"url": "https://discuss.elastic.co/t/8-19-16-9-3-5-security-update-esa-2026-33/386551", "tags": ["Vendor Advisory"], "source": "security@elastic.co"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@elastic.co", "description": [{"lang": "en", "value": "CWE-672"}]}], "descriptions": [{"lang": "en", "value": "Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure. A logic error in how expiration timestamps were validated allowed a time-bounded access token to remain usable beyond its intended validity window, enabling an unauthenticated actor in possession of the token to retrieve the associated content after expiration."}, {"lang": "es", "value": "Operaci\u00f3n en un Recurso despu\u00e9s de la Expiraci\u00f3n o Terminaci\u00f3n (CWE-672) en Kibana puede llevar a una revelaci\u00f3n de informaci\u00f3n no autorizada. Un error l\u00f3gico en c\u00f3mo se validaban las marcas de tiempo de expiraci\u00f3n permiti\u00f3 que un token de acceso con l\u00edmite de tiempo permaneciera utilizable m\u00e1s all\u00e1 de su ventana de validez prevista, permitiendo a un actor no autenticado en posesi\u00f3n del token recuperar el contenido asociado despu\u00e9s de la expiraci\u00f3n."}], "lastModified": "2026-10-14T20:10:00.190", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43EDC5B3-131D-489E-8447-05C5C599E6A7", "versionEndExcluding": "8.19.16", "versionStartIncluding": "8.0.0"}, {"criteria": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9B40710-912A-4157-9F25-89CE26C098A9", "versionEndExcluding": "9.3.5", "versionStartIncluding": "9.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@elastic.co"}