{"id":"elastic-security-eb3aba77ead4","seq":2811,"kind":"advisory","title":"Elasticsearch 9.4.8, 9.5.5 Security Update (ESA-2026-190)","url":"https://discuss.elastic.co/t/elasticsearch-9-4-8-9-5-5-security-update-esa-2026-190/390863","permalink":"https://vulnpulse.app/items/elastic-security-eb3aba77ead4","summary":"Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation (CAPEC-130). Affected Versions: 9.x: All versions from 9.2.0 up to and including 9.2.8 All versions from 9.3.0 up to and including 9.3.8 All versions from 9.4.0 up to and including 9.4.7 All versions from 9.5.0 up to and including 9.5.4 No fix is available for the 9.2.x or 9.3.x release lines. Users should upgrade to a supported rele…","severity":null,"techs":["elasticsearch"],"cves":[],"tags":["security"],"source":{"id":"elastic-security","name":"Elastic Security Announcements"},"published_at":"2026-10-06T18:41:32.000Z","fetched_at":"2026-10-21T16:17:47.217Z"}