CVE-2019-7609

CVE-2019-7609 is a critical arbitrary code execution flaw in the Timelion visualizer of Kibana versions before 5.6.15 and 6.6.1, also affecting related Elastic and Red Hat products. This vulnerability carries a CVSS score of 10.0 (CRITICAL) due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. It is actively exploited in the wild, with public Metasploit modules and Nuclei templates available, and has garnered significant community discussion and media coverage. Attackers with Timelion access can execute arbitrary commands with the permissions of the Kibana process on the host system.