CVE-2026-103005: Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with connector management privileges could cause the cluster to allocate an uncontrolled amount of memory when connector resources with an excessively large description field are created and subsequently accessed, exhausting available heap memory and crashing the affected node.
Affected Software
Event History
Frequently Asked Questions
Which users can trigger the issue?
Exploitation requires an authenticated user with connector management privileges. Unauthenticated users are not described as able to trigger it.
What action causes the denial of service?
A user creates connector resources with an excessively large description field and those resources are subsequently accessed. This can cause uncontrolled memory allocation, exhaust heap memory, and crash an affected node.
What can be done before a fix is applied?
Restrict connector management privileges to trusted users and avoid creating connector resources with excessively large description fields. The supplied information does not describe another workaround.