CVE-2026-56145
published 2026-07-21CVE-2026-56145: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated…
PriorityP336medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.47%
38.9th percentile
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive memory consumption, causing the Elasticsearch node to crash.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| elastic | elasticsearch | >= 8.0.0 < 8.19.18 | 8.19.18 |
| elastic | elasticsearch | 8.0.0 – 8.19.17 | — |
| elastic | elasticsearch | >= 9.0.0 < 9.3.7 | 9.3.7 |
| elastic | elasticsearch | 9.0.0 – 9.3.6 | — |
| elastic | elasticsearch | >= 9.4.0 < 9.4.4 | 9.4.4 |
| elastic | elasticsearch | 9.4.0 – 9.4.3 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Elastic Elasticsearch up to 8.19.17/9.3.6/9.4.3 EQL resource consumption
vuldb·2026-08-08·CVSS 6.5
CVE-2026-56145 [MEDIUM] Elastic Elasticsearch up to 8.19.17/9.3.6/9.4.3 EQL resource consumption
A vulnerability was found in Elastic Elasticsearch up to 8.19.17/9.3.6/9.4.3. It has been rated as problematic. This affects an unknown function of the component EQL. The manipulation leads to resource consumption.
This vulnerability is traded as CVE-2026-56145. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
GHSA
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).
ghsa_unreviewed·2026-07-21
CVE-2026-56145 [MEDIUM] CWE-400 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive memory consumption, causing the Elasticsearch node to crash.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-21
Published