CVE-2026-72645
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability in Elasticsearch allows an authenticated user with read-only privileges on a single index to submit one small, specially crafted search request that causes excessive memory allocation, exhausting the JVM heap and terminating the affected node.
Risk Assessment
The attack leads to denial of service (DoS) on the affected node, potentially disrupting the entire Elasticsearch cluster and impacting service availability.
Recommendation
Apply the Elasticsearch update containing the fix and restrict user privileges to the minimum necessary for their role.
Original NVD description (English source)
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only read privileges on a single index can submit one small, specially crafted search request that causes an excessively large memory allocation, exhausting the JVM heap and terminating the affected node.