PT-2026-79862 · Bitnami · Elasticsearch

Published

2026-08-19

·

Updated

2026-08-19

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only read privileges on a single index can submit one small, specially crafted search request that causes an excessively large memory allocation, exhausting the JVM heap and terminating the affected node.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

BIT-ELASTICSEARCH-2026-72645

Affected Products

Elasticsearch