Uncontrolled Recursion Vulnerability in Elasticsearch by Elastic

CVE-2026-102409

What is CVE-2026-102409?

A vulnerability in Elasticsearch permits authenticated users with limited privileges to exploit uncontrolled recursion. This can lead to the termination of an Elasticsearch node, ultimately causing a denial of service. By excessively allocating resources, an attacker may disrupt service availability, affecting overall application performance. This security issue underscores the need for robust access controls and better resource management within Elasticsearch installations.

References