Elasticsearch 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-170)

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.20 9.x: All versions from 9.0.0 up to and including 9.4.5 All versions from 9.5.0 up to and including 9.5.2 Affected Configurations: All configurations with analytical aggregation search capabilities enabled. Solutions and Mitigations: The issue is resolved in versions 8.19.21, 9.4.6, 9.5.3. For Users that Cannot Up…

Elastic Security Announcementsで読む