{"id":"elastic-security-28beabfdbde8","seq":2815,"kind":"advisory","title":"Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-185)","url":"https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-185/390859","permalink":"https://vulnpulse.app/items/elastic-security-28beabfdbde8","summary":"Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an out-of-memory condition that terminates the Elasticsearch node. The condition can be triggered repeatedly, including by queries embedded in shared resources, causing persistent cluster unavailability. Affected Versions: 8.x: All v…","severity":null,"techs":["elasticsearch"],"cves":[],"tags":["security"],"source":{"id":"elastic-security","name":"Elastic Security Announcements"},"published_at":"2026-10-06T18:34:51.000Z","fetched_at":"2026-10-21T16:17:47.217Z"}