An authorization bypass flaw identified as CWE-639 lets a user who has read access to connectors in one Kibana space retrieve detailed execution log information from other spaces. The exposed data includes connector names, identifiers, status, timestamps, error messages, and aggregated statistics, which can reveal sensitive operational details. The vulnerability is caused by insufficient ACL enforcement at the API level, which permits bypassing space boundaries to access restricted logs.

The affected product is Kibana from Elastic. No specific version numbers are listed in the provided data. Administrators should verify whether their Kibana instances possess the connectors and ACL features referenced and consult Elastic’s patch guidance for all supported releases.

The CVSS score of 4.3 indicates low severity, and the EPSS score is not available, implying limited public exploitation data. The vulnerability is not listed in the CISA KEV catalog. The attack requires an authenticated user with connector read permissions; hence the likely attack vector is a legitimate user role. Because the flaw only allows read‑only information disclosure and no privilege escalation or code execution, the overall risk remains low but still warrants verification and remediation if applicable.