CVE-2026-78594

4.9 Moyenne

Publiée le 02/09/2026 à 17:17 · Modifiée le 03/09/2026 à 21:13 · Analysée par le NVD · Source : security@elastic.co

Description

Improper Handling of Highly Compressed Data (CWE-409) in APM Server can lead to a persistent denial of service via Excessive Allocation (CAPEC-130). An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory available to APM Server when it is later processed, terminating the process. The condition recurs on every restart until the stored content is removed.

Traduire en français

Produits concernés

Elastic Apm Server

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.9 Moyenne	security@elastic.co	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-409

Références

https://discuss.elastic.co/t/apm-server-8-19-20-9-4-5-9-5-1-security-update-esa-2026-152/390110 Vendor AdvisoryMitigation

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories