## Elasticsearch 9.4.8, 9.5.5 Security Update (ESA-2026-190)

- 種別: advisory
- 関連技術: elasticsearch
- 公開日時: 2026-10-06T18:41:32.000Z
- 情報源: Elastic Security Announcements (https://discuss.elastic.co/t/elasticsearch-9-4-8-9-5-5-security-update-esa-2026-190/390863)
- パーマリンク: https://vulnpulse.app/items/elastic-security-eb3aba77ead4

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation (CAPEC-130). Affected Versions: 9.x: All versions from 9.2.0 up to and including 9.2.8 All versions from 9.3.0 up to and including 9.3.8 All versions from 9.4.0 up to and including 9.4.7 All versions from 9.5.0 up to and including 9.5.4 No fix is available for the 9.2.x or 9.3.x release lines. Users should upgrade to a supported rele…