CVE-2026-72647

[CVE catalog]

Severity

Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Published

Aug 13, 2026, 7:13:36 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.42% · Oct 25, 2026

A flaw was found in Elasticsearch. An authenticated user with read privileges on a single index can submit a specially crafted search request. This request, containing deeply nested serialized data, is processed without a depth limit, leading to uncontrolled recursion. This can exhaust the thread stack and terminate the affected node, resulting in a denial of service. Elasticsearch: Elasticsearch: Denial of Service via uncontrolled recursion in search requests This flaw has a Moderate impact. An uncontrolled recursion vulnerability exists in Elasticsearch's search API retriever framework, where a deeply nested search request is processed without a depth limit. A remote, authenticated attacker with read-level index access can send a specially crafted search request that exhausts the thread stack and terminates the affected Elasticsearch node, resulting in denial of service. Red Hat products shipping Elasticsearch versions prior to 8.0.0 are not affected, as the vulnerable code was introduced in that version. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.