Medium severity4.9NVD Advisory· Published Jul 1, 2026· Updated Jul 2, 2026
CVE-2026-56149
CVE-2026-56149
Description
Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the affected node unavailable.
Affected products
4cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*range: >=8.0.0,<8.19.17
- (no CPE)
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.