A vulnerability was found in Elastic Kibana up to 8.19.5/9.1.5 on Windows. It has been rated as critical. This vulnerability affects unknown code of the component Defend Service. This manipulation causes preservation of permissions.

This vulnerability is registered as CVE-2025-37735. The attack needs to be launched locally. No exploit is available.