Security Advisory

CVE-2026-63136

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-21 20:20:07

Last updated 2026-07-22 19:41:00

Assigner elastic

CVSS score 6.5

State PUBLISHED

Description

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search request that causes a data node to exhaust available heap memory, resulting in node unavailability and cluster degradation. An attacker could leverage this vulnerability to cause cluster downtime requiring manual intervention to restore service.

← Browse all CVEs View on cve.org ↗