CVE-2026-72649

score

0.3

cvss

8.8

epss

0.9%

published

2026-09-01

kev added

—

first seen

2026-10-21

Elasticsearch machine learning component contains an insecure deserialization vulnerability caused by untrusted data deserialization in trained model artifacts, letting authenticated users with sufficient privileges execute remote code, exploit requires authenticated privileged user.