CVE-2026-72685

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description A flaw allows a low-privileged authenticated user with indexing permissions to submit a small document containing crafted input. Processing this document occupies a worker thread from a bounded pool for a disproportionate amount of time, which degrades the availability of indexing operations on the affected node.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.