CVE-2026-115290

A flaw was found in Elasticsearch. An unauthenticated remote attacker with network access to a node's remote cluster server interface can send specially crafted requests containing deeply nested serialized data. Processing this data triggers excessive recursion, causing the affected node to crash...