CVE-2026-102409

Undergoing Analysis Undergoing Analysis - In Progress

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-13

Assigner: Elastic

Description

Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation (CAPEC-130).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102409

EUVD

EUVD-2026-93930

Affected Vendors & Products

Vendor	Product	Version / Range
elastic	elasticsearch	From 9.5.0 (inc) to 9.5.5 (exc)
elastic	elasticsearch	From 9.2.0 (inc) to 9.4.8 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-674	The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Attack-Flow Graph

Executive Summary

This vulnerability involves uncontrolled recursion in Elasticsearch, allowing an authenticated low-privilege user to terminate a node through excessive allocation. This leads to a denial of service by crashing the node.

Detection Guidance

This vulnerability involves uncontrolled recursion leading to denial of service. Detection requires monitoring Elasticsearch logs for excessive allocation errors or node crashes. Check Elasticsearch logs for repeated stack overflow errors or node termination events. Use commands like 'curl -XGET localhost:9200/_nodes/stats' to monitor node health and resource usage.

Impact Analysis

An attacker could exploit this to crash Elasticsearch nodes, disrupting search functionality and causing downtime for services relying on Elasticsearch.

Compliance Impact

This vulnerability causes denial of service by terminating Elasticsearch nodes, which could disrupt data availability. For GDPR, this may violate Article 32 requirements for data availability and integrity. For HIPAA, it could impact access to protected health information, potentially breaching Security Rule requirements for availability.

Mitigation Strategies

Apply the latest security patches or updates provided by Elastic for Elasticsearch to address the uncontrolled recursion issue. Monitor network traffic for excessive allocation patterns that may indicate exploitation attempts.

Hi! I’m here to help you understand CVE-2026-102409. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70