CVE-2025-37728: Elastic Kibana

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked. A malicious user can access cached credentials from a Crowdstrike connector in another space by creating and running a Crowdstrike connector in a space to which they have access.

Affected products

• Elastic Kibana: from 7.0.0, up to and including 7.17.29; from 8.14.0, up to and including 8.18.7; from 8.19.0, up to and including 8.19.4; from 9.0.0, up to and including 9.0.7; from 9.1.0, up to and including 9.1.4

Published 2025-10-07. Last modified 2026-10-08.