A vulnerability described as problematic has been identified in Elastic Kibana up to 8.19.19/9.4.4 . This issue affects some unknown processing of the component Vega Handler . Executing a manipulation can lead to cross-site request forgery. This vulnerability is registered as CVE-2026-72658 . It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.