CVE-2026-72679

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description An issue exists where the software fails to apply configurable input length restrictions to user-supplied patterns used in intervals queries. A deeply nested pattern can cause unbounded recursion, which exhausts the thread stack and triggers a fatal error. This results in the termination of the node process, leading to a denial of service. An authenticated user with read-only privileges on a single searchable index can trigger this condition using a small search request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.