CVE-2026-72679
published 2026-08-13CVE-2026-72679: Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested…
PriorityP335medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.47%
38.9th percentile
Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested pattern drives unbounded recursion that exhausts the thread stack and raises a fatal error, terminating the Elasticsearch node process and causing a denial of service for that node. An authenticated user holding only read-only privileges on a single searchable index can trigger the condition with one small search request.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| elastic | elasticsearch | >= 8.19.0 < 8.19.20 | 8.19.20 |
| elastic | elasticsearch | 8.19.0 – 8.19.19 | — |
| elastic | elasticsearch | >= 9.0.0 < 9.4.5 | 9.4.5 |
| elastic | elasticsearch | 9.0.0 – 9.4.4 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Elastic Elasticsearch up to 8.19.19/9.4.4 Intervals Query recursion
vuldb·2026-08-13·CVSS 6.5
CVE-2026-72679 [MEDIUM] Elastic Elasticsearch up to 8.19.19/9.4.4 Intervals Query recursion
A vulnerability marked as problematic has been reported in Elastic Elasticsearch up to 8.19.19/9.4.4. This issue affects some unknown processing of the component Intervals Query. The manipulation leads to uncontrolled recursion.
This vulnerability is referenced as CVE-2026-72679. Remote exploitation of the attack is possible. No exploit is available.
GHSA
Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query.
ghsa_unreviewed·2026-08-13
CVE-2026-72679 [MEDIUM] CWE-674 Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query.
Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested pattern drives unbounded recursion that exhausts the thread stack and raises a fatal error, terminating the Elasticsearch node process and causing a denial of service for that node. An authenticated user holding only read-only privileges on a single searchable index can trigger the condition with one small search request.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-13
Published