Resource Allocation Vulnerability in Elasticsearch by Elastic

CVE-2025-68384

What is CVE-2025-68384?

A vulnerability exists in Elasticsearch that allows a low-privileged authenticated user to exploit resource allocation settings. This can result in excessive resource consumption, potentially leading to a persistent denial of service (DoS) due to an out-of-memory (OOM) crash when oversized user settings data is submitted. Organizations using affected Elasticsearch versions should take immediate action to mitigate this risk and ensure system stability.

References