CVE-2026-63144

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description Uncontrolled Recursion in the query evaluation component allows a low-privileged authenticated user with read-level index access to cause a denial of service. By submitting a specially crafted search request, the user can trigger unbounded recursive processing, leading to a fatal error that terminates the affected node. This results in a complete service outage for single-node deployments or repeated node restarts and availability degradation in multi-node clusters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.