Skip to content
OtherHigh

CVE-2025-25014: A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP req…

Occurred
May 6, 2025
Published
May 6, 2025
Source
NVD CVE

Summary

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.

Tags

  • CVE
  • CVE-2025-25014
  • cvss:CRITICAL

Classification

Category confidence: 90%
Severity confidence: 90%

Rationale: Prototype pollution vulnerability in Kibana allows arbitrary code execution, representing a significant security risk.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source