CVE-2026-72638

score

0.1

cvss

6.5

epss

0.4%

published

2026-08-13

kev added

—

first seen

2026-10-21

Elasticsearch contains a denial of service caused by uncontrolled recursion in custom analysis definitions, letting authenticated low-privileged users exhaust thread stack and terminate nodes, exploit requires low-privileged index creation permissions.