Hi, Is there any patch or work-around or mitigation available to address Node.js vulnerabilities like CVE-2026-111497 in Elasticsearch. Please advise. Thanks.

Hi @neoprabu, Welcome! I assume you're asking about remediation for Kibana rather than Elasticsearch given this is a Node.js vulnerability? I see that the team have merged a fix and it will be made available in the upcoming Kibana version. Hope that helps!

Hi @carly.richmond : Yes, our scan has reported issue with Kibana and not with Elastic search

Hi @carly.richmond : when we can expect the kibana release with a fix for CVE-2026-111497 (Node.js vulnerabilities). Meanwhile, is there any other UI / interface which we can use to query Elastic search

Node.js vulnerabilities impact to Kibana

Elastic Stack Kibana

carly.richmond (Carly Richmond) November 4, 2026, 2:33pm 5

Hi @Nataraj,

The fix has been released. You can read more details on the impacted and fix versions in this security announcement.

Hope that helps!

Topic		Replies	Views
Node.js vulnerabilities Kibana	3	872	May 10, 2024
Elasticsearch vulnerability issue Kibana elastic-stack-security	1	147	March 4, 2025
Security Warning: Multiple Node.js Vulnerabilities Detected in Elasticsearch Kibana	0	266	August 14, 2024
Kibana : CVE-2026-111497 - Node.js Multiple Security Vulnerabilities Kibana	2	103	November 2, 2026
Expected resolution for some vulnerabilities found Elasticsearch elastic-stack-security	1	213	November 9, 2024

Node.js vulnerabilities impact to Kibana

Related topics