A flaw was found in Elasticsearch. An authenticated remote attacker can exploit this vulnerability to trigger excessive resource allocation, leading to a Denial of Service (DoS). By sending requests that consume disproportionate system resources, an attacker can exhaust system capacity and cause the service to become unresponsive.
Last checked: 2026-09-29 20:36 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-26 23:00 UTC)
Fix evidence last checked: 2026-09-28 11:58 UTC