CVE-2026-72685

4.3 Moyenne

Publiée le 13/08/2026 à 22:17 · Modifiée le 01/09/2026 à 17:04 · Analysée par le NVD · Source : security@elastic.co

Description

A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document occupies a worker thread from a bounded pool for a disproportionate amount of time, degrading the availability of indexing operations on the affected node.

Traduire en français

Produits concernés

Elasticsearch
Elastic elasticsearch

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.3 Moyenne	security@elastic.co	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L`

Faiblesses (CWE)

CWE-407

Références

https://discuss.elastic.co/t/elasticsearch-8-19-20-9-4-5-security-update-esa-2026-77/389500 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories