## Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-185)

- 種別: advisory
- 関連技術: elasticsearch
- 公開日時: 2026-10-06T18:34:51.000Z
- 情報源: Elastic Security Announcements (https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-185/390859)
- パーマリンク: https://vulnpulse.app/items/elastic-security-28beabfdbde8

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an out-of-memory condition that terminates the Elasticsearch node. The condition can be triggered repeatedly, including by queries embedded in shared resources, causing persistent cluster unavailability. Affected Versions: 8.x: All v…