Incorrect authorization in Kibana Fleet fails to validate Elasticsearch cluster privilege declarations from integration packages before minting enrolled Elastic Agent credentials. A user with Fleet management privileges can manipulate input so agents on a targeted policy receive arbitrarily elevated cluster privileges, up to full cluster admin. Affects 8.0.0–8.19.20, 9.0.0–9.4.5, 9.5.0–9.5.2; upgrade to 8.19.21, 9.4.6, or 9.5.3.