Resource Allocation Vulnerability in Elasticsearch by Elastic
CVE-2025-68384
6.5MEDIUM
What is CVE-2025-68384?
A vulnerability exists in Elasticsearch that allows a low-privileged authenticated user to exploit resource allocation settings. This can result in excessive resource consumption, potentially leading to a persistent denial of service (DoS) due to an out-of-memory (OOM) crash when oversized user settings data is submitted. Organizations using affected Elasticsearch versions should take immediate action to mitigate this risk and ensure system stability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Elasticsearch 7.0.0 <= 7.17.29
Elasticsearch 8.0.0 <= 8.19.8
Elasticsearch 9.0.0 <= 9.1.8