CVE-2026-72642

score

0.2

cvss

8.8

epss

0.6%

published

2026-08-13

kev added

—

first seen

2026-10-21

Elasticsearch contains a buffer overflow caused by lack of bounds validation on memory offset in uploaded machine learning models, letting users with model upload privileges cause heap corruption or execute arbitrary code, exploit requires model upload privileges.