CVE-2025-68384

Publication date

2025-12-18 22:04:50

Family

elastic

State

PUBLISHED

Description

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial of service (OOM crash) via submission of oversized user settings data.