CVE-2026-72656

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description An issue in the ES|QL query processing allows an authenticated user to submit a specially crafted query. The evaluation of this query can trigger memory allocation with an excessive size value, leading to an unbounded amount of heap memory being allocated. This results in the exhaustion of available heap on the receiving node, causing a denial of service and making the node unavailable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.