Denial of Service Vulnerability in Elasticsearch by Elastic

CVE-2026-56149

What is CVE-2026-56149?

A resource allocation flaw in Elasticsearch allows users with elevated privileges to submit specially crafted machine learning requests that excessively consume memory. This can result in a denial of service, potentially making the affected instance unavailable to legitimate users. It is essential for users to apply necessary patches and follow best practices to mitigate this vulnerability.

References