CVE-2026-56145: Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive memory consumption, causing the Elasticsearch node to crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56145?
CVE-2026-56145 has a medium severity score of 6.5.
What impact does CVE-2026-56145 have on Elasticsearch?
CVE-2026-56145 can lead to denial of service due to uncontrolled resource consumption.
Who is affected by CVE-2026-56145?
Low-privileged authenticated users with permission to execute EQL sequence queries can exploit CVE-2026-56145.
How does CVE-2026-56145 allow for denial of service?
CVE-2026-56145 allows denial of service through excessive allocation triggered by specially crafted EQL sequence queries.
How can I mitigate CVE-2026-56145?
To mitigate CVE-2026-56145, ensure that users have the minimum necessary permissions and monitor for unusual query patterns.