CVE-2026-72684

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description An authenticated user with read privileges can trigger a denial of service by submitting a small search request containing crafted input. This input causes an internal component to allocate memory without an upper bound, bypassing existing memory accounting controls. This leads to a fatal out-of-memory condition that terminates the affected node process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.