important · Kibana — privilege
A low-privilege Kibana agent editor can borrow a later administrator’s authority.
Affects
Kibana Agent Builder and Workflows, the AI-agent interface for Elasticsearch deployments.
An account allowed to manage agents and create Workflows can attach attacker-controlled behavior to a shared agent. When an administrator later interacts with it, the workflow runs with that administrator’s authority and can create durable cluster credentials.
Detail and 1 source
Elastic says Agent Builder and Workflows are enabled by default and names fixed releases.