Elastic Rolls Out Critical Updates To Fix Major Kibana Flaw (CVE-2025-25012)

Elastic has released critical updates to address a severe prototype pollution vulnerability in Kibana, identified as CVE-2025-25012, with a CVSS score of 9.9. This flaw impacts Kibana versions 8.15.0 to 8.17.3 and could lead to remote code execution. Users are urged to update their Kibana installations immediately to mitigate this risk.

You Should Know:

To check your Kibana version and ensure it is updated, use the following command:

curl -X GET "localhost:5601/api/status" -H 'kbn-xsrf: true'

If your version falls within the affected range, update Kibana using:

sudo apt-get update
sudo apt-get install kibana

For manual updates, download the latest version from the Elastic website and follow the installation instructions.

To verify the update was successful, run:

curl -X GET "localhost:5601/api/status" -H 'kbn-xsrf: true'

Ensure your Kibana instance is secure by restricting access to trusted IPs using firewall rules:

sudo ufw allow from 192.168.1.0/24 to any port 5601

Additionally, monitor your Kibana logs for any suspicious activity:

tail -f /var/log/kibana/kibana.log

What Undercode Say:

Prototype pollution vulnerabilities, like CVE-2025-25012, are critical as they can allow attackers to execute arbitrary code on affected systems. Regularly updating software and applying security patches is essential to protect against such threats. Elastic’s prompt response highlights the importance of staying vigilant in the cybersecurity landscape. For further details on the vulnerability and mitigation steps, visit the Elastic Security Advisory. Always ensure your systems are up-to-date and follow best practices for securing your infrastructure.