CVE-2026-103005

score

0.5

cvss

6.5

epss

0.3%

published

2026-10-06

kev added

—

first seen

2026-10-21

Elasticsearch contains a denial of service vulnerability caused by excessive memory allocation when an authenticated user with connector management privileges creates and accesses connector resources with an excessively large description field, letting attackers exhaust heap memory and crash nodes.