## Elasticsearch 9.4.7, 9.5.4 Security Update (ESA-2026-182)

- 種別: advisory
- 関連技術: elasticsearch
- 公開日時: 2026-09-25T08:35:05.000Z
- 情報源: Elastic Security Announcements (https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-4-security-update-esa-2026-182/390686)
- パーマリンク: https://vulnpulse.app/items/elastic-security-11df4f1e6881

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Versions: 9.x: All versions from 9.2.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.3 Affected Configurations: All configurations Solutions and Mitigations: The issue is resolved in version 9.4.7, 9.5.4. The versions above are the first releases that contain the fix where later releases also contain it. Elastic recommends upgrading to the most recent rel…