Node.js vulnerabilities impact to Kibana

Hi, Is there any patch or work-around or mitigation available to address Node.js vulnerabilities like CVE-2026-111497 in Elasticsearch. Please advise. Thanks.

Hi @neoprabu,

Welcome! I assume you're asking about remediation for Kibana rather than Elasticsearch given this is a Node.js vulnerability?

I see that the team have merged a fix and it will be made available in the upcoming Kibana version.

Hope that helps!

Hi @carly.richmond : Yes, our scan has reported issue with Kibana and not with Elastic search

Hi @carly.richmond : when we can expect the kibana release with a fix for CVE-2026-111497 (Node.js vulnerabilities). Meanwhile, is there any other UI / interface which we can use to query Elastic search

Hi @Nataraj,

The fix has been released. You can read more details on the impacted and fix versions in this security announcement.

Hope that helps!