CVE-2026-72642
published 2026-08-13CVE-2026-72642: The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from…
PriorityP358high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.60%
48.3th percentile
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with the privileges required to upload and deploy a trained model can craft a model that reads and writes memory outside the intended allocation. The result is heap corruption that crashes the inference process, and, with sufficient control over the heap layout, could allow arbitrary code execution in the context of that process.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| elastic | elasticsearch | — | — |
| elastic | elasticsearch | >= 8.19.0 < 8.19.20 | 8.19.20 |
| elastic | elasticsearch | 8.19.0 – 8.19.19 | — |
| elastic | elasticsearch | >= 9.4.0 < 9.4.5 | 9.4.5 |
| elastic | elasticsearch | 9.4.0 – 9.4.4 | — |
| elastic | elasticsearch | >= 9.5.0 < 9.5.1 | 9.5.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Elastic Elasticsearch up to 8.19.19/9.4.4/9.5.0 Inference Process heap-based overflow (EUVD-2026-58287 / WID-SEC-2026-2841)
vuldb·2026-08-16·CVSS 8.8
CVE-2026-72642 [HIGH] Elastic Elasticsearch up to 8.19.19/9.4.4/9.5.0 Inference Process heap-based overflow (EUVD-2026-58287 / WID-SEC-2026-2841)
A vulnerability marked as very critical has been reported in Elastic Elasticsearch up to 8.19.19/9.4.4/9.5.0. Affected by this vulnerability is an unknown functionality of the component Inference Process. This manipulation causes heap-based buffer overflow.
This vulnerability is registered as CVE-2026-72642. Remote exploitation of the attack is possible. No exploit is available.
GHSA
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, wit
ghsa_unreviewed·2026-08-13
CVE-2026-72642 [HIGH] CWE-823 The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, wit
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with the privileges required to upload and deploy a trained model can craft a model that reads and writes memory outside the intended allocation. The result is heap corruption that crashes the inference process, and, with sufficient control over the heap layout, could allow arbitrary code execution in the context of that process.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-13
Published