CVE-2026-72645

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description An authenticated user with read privileges on a single index can trigger a denial of service by submitting a specially crafted search request. This action causes an excessively large memory allocation, which exhausts the JVM heap (the memory area where the Java Virtual Machine stores objects) and terminates the affected node.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.