Privilege escalation via shared-agent workflow identity confusion

Privilege escalation in Elastic Kibana 9.4.0 through 9.4.6 allows remote authenticated users to execute privileged Agent Builder actions. A lower-privileged editor can attach a workflow to a shared agent, and Agent Builder carries out its operations under the identity of the higher-privileged user who later interacts with that agent. Exploitation requires Agent Builder and workflow-authoring privileges, a configured generative AI connector, and later privileged-user interaction; it can grant full Kibana and Elasticsearch administration.