CVE-2026-102411 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to Denial of Service via Excessive Allocation CAPEC-130. Elasticsearch enforces a size limit on the user-supplied metadata field for each individual template resource, but does not limit the total memory used...

EUVD-2026-93932

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to Denial of Service via Excessive Allocation CAPEC-130. Elasticsearch enforces a size limit on the user-supplied metadata field for each individual template resource, but does not limit the total memory used...

CVE-2026-102411

Elasticsearch is vulnerable to a Denial of Service (DoS) via Excessive Allocation (CWE-770 ) due to a lack of memory throttling when retrieving multiple resources. While individual template resources have metadata size limits, the system fails to limit total memory usage during collective retriev...