## Elasticsearch 9.4.7, 9.5.3, 8.19.23 Security Update (ESA-2026-192)

- 種別: advisory
- 関連技術: elasticsearch
- 公開日時: 2026-10-06T18:43:29.000Z
- 情報源: Elastic Security Announcements (https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-3-8-19-23-security-update-esa-2026-192/390865)
- パーマリンク: https://vulnpulse.app/items/elastic-security-579b94072f2a

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130). Elasticsearch enforces a size limit on the user-supplied metadata field for each individual template resource, but does not limit the total memory used when multiple such resources are retrieved together. A user holding the manage_index_templates cluster privilege can register multiple resources each within the individual limit. Retrieving them toget…