This vulnerability in Elastic Kibana allows an authenticated user with viewer-level access to submit an oversized input value to an analytics collections management endpoint. The input triggers excessive CPU and memory consumption, leading to a denial of service for all users. The weakness is identified as CWE-400, Uncontrolled Resource Consumption, which can disrupt availability by exhausting system resources.

The affected product is Elastic Kibana. No specific version information is provided in the CNA data, so any Kibana deployment potentially vulnerable cannot be identified by version alone. Administrators should review logs for excessive resource usage and refer to vendor advisories for any patch availability.

With a CVSS score of 6.5, the vulnerability falls into the medium severity range, and the EPSS score is not available, indicating limited publicly known exploitations. The vulnerability is not listed in CISA KEV, which suggests it has not yet been widely observed in the wild. The attack requires authenticated access with viewer-level permissions, implying the attacker must already have legitimate credentials or must compromise a user account. The likely attack vector is through the Kibana web interface where the user can submit the oversized payload. Upon exploitation, the service becomes unavailable until it is manually recovered, impacting availability.