## Elasticsearch 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-170)

- 種別: advisory
- 関連技術: elasticsearch
- 公開日時: 2026-09-25T08:33:09.000Z
- 情報源: Elastic Security Announcements (https://discuss.elastic.co/t/elasticsearch-8-19-21-9-4-6-9-5-3-security-update-esa-2026-170/390681)
- パーマリンク: https://vulnpulse.app/items/elastic-security-e934dfc2e100

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.20 9.x: All versions from 9.0.0 up to and including 9.4.5 All versions from 9.5.0 up to and including 9.5.2 Affected Configurations: All configurations with analytical aggregation search capabilities enabled. Solutions and Mitigations: The issue is resolved in versions 8.19.21, 9.4.6, 9.5.3. For Users that Cannot Up…