CVE-2026-72638

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description Uncontrolled Recursion occurs when a program continues to call a function without a proper termination condition, potentially leading to a system crash. An authenticated user with low-privileged index creation permissions can trigger a denial of service by submitting a single request with a malformed custom analysis definition. This definition is resolved recursively without a cycle or depth check, which exhausts the thread stack and terminates the affected node.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.