CVE-2026-63144

Summary (CVE-2026-63144): An uncontrolled recursion (CWE-674) in Elasticsearch’s query evaluation can cause a denial of service. A low-privilege authenticated user with read-level index access can submit a crafted search request that triggers unbounded recursive processing, leading to a fatal err...