CVE-2026-103008

[CVE catalog]

Severity

Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Published

Oct 6, 2026, 7:31:51 PM UTC

Updated

Oct 6, 2026, 8:17:14 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.31% · Oct 25, 2026

A flaw was found in Elasticsearch. An authenticated user with read access to an index can trigger unbounded recursion by submitting a request defining a scripted runtime field that generates deeply nested geometry structures. Because the server does not enforce a recursion depth limit when processing these scripted geometry values, memory stack space is exhausted. This causes the affected node to crash unexpectedly, resulting in a Denial of Service (DoS) that may require manual intervention to recover. elasticsearch: elasticsearch: Denial of Service via uncontrolled recursion in scripted runtime fields This vulnerability is evaluated as a Moderate severity impact because triggering the failure requires an authenticated user with existing index read permissions, and exploitation is limited strictly to service interruption without compromising confidentiality or integrity. In affected deployments, an authorized client can formulate a search query containing scripted fields that produce excessively nested geometric objects. Processing these recursive geometries exhausts stack space and forces the node process to terminate, requiring administrative intervention to recover the affected instance. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.