Medium severity6.5NVD Advisory· Published Jul 1, 2026· Updated Jul 2, 2026
CVE-2026-56148
CVE-2026-56148
Description
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query that causes excessive resource consumption while the request is processed, which may render the affected node unavailable.
Affected products
4cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*range: >=8.0.0,<8.19.17
- (no CPE)
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.