PT-2026-54864

CVE-2026-56149

·

Published

2026-07-01

·

Updated

2026-10-06

Description by

CVSS 2.0
6.1
Medium
MetricsAV:N/AC:L/Au:M/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)
Description An issue exists where the allocation of resources lacks limits or throttling. A user with elevated privileges can submit a specially crafted machine learning request that triggers excessive memory consumption, potentially leading to a denial of service and rendering the affected node unavailable.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
BIT-ELASTICSEARCH-2026-56149
CLEANSTART-2026-HO72909
CLEANSTART-2026-WN55033
Found an issue in the description? Have something to add? Feel free to write us 👾