PT-2026-62093 · Elastic · Elasticsearch

CVE-2026-56145

·

Published

2026-07-21

·

Updated

2026-08-07

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)
Description Uncontrolled Resource Consumption allows a low-privileged authenticated user with permission to execute EQL sequence queries against an index they control to trigger excessive memory consumption. By sending a specially crafted query, the user can cause the Elasticsearch node to crash, resulting in a denial of service. Uncontrolled Resource Consumption refers to a condition where a software does not properly limit the amount of resources it consumes, while Excessive Allocation occurs when a program allocates more memory than is available or necessary.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BIT-ELASTICSEARCH-2026-56145
CVE-2026-56145

Affected Products

Elasticsearch