FlagThis

A critical security vulnerability, CVE-2025-25012, has been identified in Kibana, the data visualization platform used with Elasticsearch. This flaw stems from prototype pollution and could enable attackers to execute arbitrary code on affected systems. Given Kibana's widespread adoption across various industries, this vulnerability poses a significant risk to data security, integrity, and system stability. The vulnerability has a CVSS score of 9.9.

Versions 8.15.0 up to 8.17.3 are affected, where users with the Viewer role can be exploited, and versions 8.17.1 and 8.17.2 can be exploited through roles with elevated privileges. It is advised to update Kibana to version 8.17.3. Immediate action is crucial for organizations using vulnerable versions of Kibana to mitigate the potential for unauthorized access, data exfiltration, and service disruption.

ImgSrc: socradar.io

References :

• socradar.io: Critical Kibana Vulnerability (CVE-2025-25012) Exposes Systems to Code Execution, Patch Now
• securityaffairs.com: Security Affairs article on Elastic patching critical Kibana flaw.
• The Hacker News: The Hacker News article on Elastic releasing an urgent fix for a critical Kibana vulnerability.
• thecyberexpress.com: Elastic Issues Urgent Update for Critical Kibana Vulnerability Exposing Remote Code Execution Risk
• Rescana: Critical Kibana Vulnerability Report: Urgent Mitigation Needed for CVE-2025-25015
• securityonline.info: CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana
• securityonline.info: CVE-2025-25015 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana
• research.kudelskisecurity.com: Critical Kibana Vulnerability Enabling Remote Code Execution (CVE-2025-25012)
• Tom Sellers: Elastic has published a security advisory for a CVSSv3 9.9 rated RCE in Kibana versions 8.15.0 to 8.17.2. The access required varies depending on the version, see the post below. Kibana version 8.17.3 has been released to address this vulnerability.
• securityaffairs.com: Elastic patches critical Kibana flaw allowing code execution

Classification:

• HashTags: #Kibana #Vulnerability #Elasticsearch
• Company: SocRadar
• Target: Kibana Users
• Product: Kibana
• Feature: Code Execution
• Malware: CVE-2025-25012
• Type: Vulnerability
• Severity: Critical