Skip to content
ElasticCVE-2026-56145

Elasticsearch: resource exhaustion

Medium6.5CVE-2026-56145 · Published Jul 21, 2026 · updated Aug 7, 2026

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive memory consumption, causing the Elasticsearch node to crash.

Elastic advisory

Affected versions

PackageAffectedFixed in
Elasticsearch
Product
>= 9.4.0, <= 9.4.3No fix yet
>= 8.0.0, <= 8.19.17No fix yet
>= 9.0.0, <= 9.3.6No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-400

More Elastic advisories

All Elastic
Advisory
Elastic Kibana: improper authorization
Medium5.0Jul 21
Elastic Kibana: missing authorization
Medium4.3Jul 21
Elasticsearch: denial of service
Medium6.5Jul 21
Elastic Kibana: improper authorization
Medium4.3Jul 21
Elastic Kibana: information disclosure
Medium4.3Jul 21
Elastic Kibana: resource exhaustion
Medium6.5Jul 21

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.