An unintended proxy or intermediary flaw, identified as CWE-441, is present in the Kibana Agent Builder. A user without administrative privileges can edit a shared agent. The edit triggers privileged operations to execute under the identity of the higher‑privileged user who subsequently interacts with that agent. If the same user also author workflows, the abuse can scale to full administrative control of Kibana and the underlying Elasticsearch cluster.

Elastic Kibana is affected. No specific product versions are enumerated in the available data, so all releases of Kibana that include the Agent Builder feature should be considered potentially vulnerable.

The CVSS base score is 7.3, indicating a high impact severity. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector requires an authenticated non‑administrator account with the ability to modify shared agents, making the vulnerability exploitable via legitimate user actions. The scope is potentially wide if the compromised agent is used by multiple users or services, resulting in a risk of full administrative takeover of Kibana and Elasticsearch.