Memory Allocation Vulnerability in Elasticsearch by Elastic

CVE-2026-103005

What is CVE-2026-103005?

A vulnerability exists in Elasticsearch that could be exploited by authenticated users with connector management privileges. When these users create connector resources with excessively large 'description' fields, they can trigger excessive memory allocation, which risks exhausting available heap memory. This can lead to a denial of service, causing nodes within the cluster to crash, thereby disrupting service availability.

References