CVE-2026-49091

Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written to log files without proper neutralization. When the log files are subsequently viewed in a terminal that interprets control sequences, the injected content may alter the displayed log data.

CVSS v3 8.0 HIGH

8.0^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://discuss.elastic.co/t/kibana-7-17-15-8-11-1-security-update-esa-2026-53	Vendor Advisory Mitigation

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:elastic:kibana::::::::
	cpe:2.3:a:elastic:kibana::::::::

History

25 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) La neutralización inadecuada de la salida para logs (CWE-117) en Kibana puede conducir a la inyección de logs a través de Inyección-Manipulación-Falsificación de Logs (CAPEC-93). Un atacante puede suministrar una entrada especialmente diseñada que se escribe en archivos de logs sin la neutralización adecuada. Cuando los archivos de logs se visualizan posteriormente en una terminal que interpreta secuencias de control, el contenido inyectado puede alterar los datos de logs mostrados.

Information

Published : 2026-07-01 18:16

Updated : 2026-10-25 17:10

NVD link : CVE-2026-49091

Mitre link : CVE-2026-49091

CVE.ORG link : CVE-2026-49091

JSON object : View

Products Affected

elastic

kibana

CWE

CWE-116

Improper Encoding or Escaping of Output

{"id": "CVE-2026-49091", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-49091", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-01T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@elastic.co", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.3}]}, "affected": [{"source": "security@elastic.co", "affectedData": [{"vendor": "Elastic", "product": "Kibana", "versions": [{"status": "affected", "version": "8.0.0", "versionType": "semver", "lessThanOrEqual": "8.11.0"}, {"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.17.14"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-01T18:16:34.040", "references": [{"url": "https://discuss.elastic.co/t/kibana-7-17-15-8-11-1-security-update-esa-2026-53", "tags": ["Vendor Advisory", "Mitigation"], "source": "security@elastic.co"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@elastic.co", "description": [{"lang": "en", "value": "CWE-116"}]}], "descriptions": [{"lang": "en", "value": "Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written to log files without proper neutralization. When the log files are subsequently viewed in a terminal that interprets control sequences, the injected content may alter the displayed log data."}, {"lang": "es", "value": "La neutralizaci\u00f3n inadecuada de la salida para logs (CWE-117) en Kibana puede conducir a la inyecci\u00f3n de logs a trav\u00e9s de Inyecci\u00f3n-Manipulaci\u00f3n-Falsificaci\u00f3n de Logs (CAPEC-93). Un atacante puede suministrar una entrada especialmente dise\u00f1ada que se escribe en archivos de logs sin la neutralizaci\u00f3n adecuada. Cuando los archivos de logs se visualizan posteriormente en una terminal que interpreta secuencias de control, el contenido inyectado puede alterar los datos de logs mostrados."}], "lastModified": "2026-10-25T17:10:00.197", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A25080F6-A136-4D8F-BA71-B48402A1BC7E", "versionEndExcluding": "7.17.15", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDC4443D-DC1A-41CB-A1BC-817A15246F81", "versionEndExcluding": "8.11.1", "versionStartIncluding": "8.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@elastic.co"}