Memory Allocation Vulnerability in Elasticsearch by Elastic

CVE-2025-68390

What is CVE-2025-68390?

A vulnerability in Elasticsearch allows authenticated users with snapshot restore privileges to exploit improper resource management. By sending specially crafted HTTP requests, these users can trigger excessive memory allocation, leading to denial of service (DoS) conditions. This issue underscores the need for tightly controlled resource allocation and effective throttling mechanisms to prevent abuse and ensure the stability of the Elasticsearch environment.

References