Skip to content
OpenAdvisories
Medium WID-SEC-2026-3784 10 CVEs

Elasticsearch: Mehrere Schwachstellen

Published Oct 6, 2026 · Updated Oct 13, 2026 · Revision 2 · de-DE

Vendor: Microsoft Product: Azure Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder Denial-of-Service-Zustände auszulösen.

Product

Elasticsearch ist eine Open Source, verteilte Echtzeit-Suche und Analyse-Engine.

Vulnerabilities 10

  • High 7.2
    CVE-2026-103007

    Incorrect Authorization in Elasticsearch Leading to Privilege Escalation

    Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configu…

    Elastic Elasticsearch
  • High 7.1
    CVE-2026-103009

    Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure

    Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search request that references an unauthorized shard identifier. Elasticsearch contains an authorization bypas…

    Elastic Elasticsearch
  • Medium 6.5
    CVE-2026-102404

    Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

    Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query proce…

    Elastic Elasticsearch rubygem-elasticsearch Azure Linux
  • Medium 6.5
    CVE-2026-102409

    Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

    Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation (CAPEC-130).

    Elastic Elasticsearch
  • Medium 6.5
    CVE-2026-102411

    Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

    Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130). Elasticsearch enforces a size limit on the user-supplied metadata field for each individual template resource, …

    Elastic Elasticsearch rubygem-elasticsearch Azure Linux
  • Medium 6.5
    CVE-2026-103005

    Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

    Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with connector management privileges could cause the cluster to allocate an uncontrolled amount of…

    Elastic Elasticsearch
  • Medium 6.5
    CVE-2026-103006

    Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

    Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggr…

    Elastic Elasticsearch rubygem-elasticsearch Azure Linux
  • Medium 6.5
    CVE-2026-103008

    Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

    Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with no bound on recursion depth. Elasticsearch contains an uncontro…

    Elastic Elasticsearch
  • Medium 5.4
    CVE-2026-102407

    Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification

    Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user with sufficient privileges over a single resource could use the …

    Elastic Elasticsearch rubygem-elasticsearch Azure Linux
  • Medium 4.3
    CVE-2026-102408

    Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service

    Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expression Exponential Blowup (CAPEC-492). The ES|QL CHUNK function's recursive chunking strategy accepts a list of user-supplied regular expressio…

    Elastic Elasticsearch

Revision history

  1. #2

    Neue Updates aufgenommen

  2. #1

    Initiale Fassung

References