Disclosure summary
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with no bound on recursion depth. Elasticsearch contains an uncontrolled recursion weakness in how it builds and serializes geometry values produced by scripted runtime fields. Unlike geometry supplied as text, which is subject to a nesting-depth limit, geometry constructed from a script's output is not bounded. An authenticated user with read access to a single index can submit a request defining such a field with a script that produces a deeply nested structure. Processing this request recurses past the available stack space, causing the affected node to terminate. The node does not recover automatically on all deployments and may require manual intervention to restore service.
Source-reported weakness categories
CWE-674
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
NIST National Vulnerability Database · NVD-CVE-2026-103008
Open original source · Updated Oct 09, 2026
Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.
| Vendor | Product / association | Version / bounds |
|---|---|---|
| elastic | elasticsearch | * {"versionStartIncluding":"9.5.0","versionEndExcluding":"9.5.5"} |
Original records & references
- NIST NVD record
- CVE Program record
- discuss.elastic.co — Vendor Advisory
PUBLISHED 2026-10-06T16:17:14-04:00
MODIFIED 2026-10-09T09:21:34-04:00
INGESTED 2026-10-10T20:50:46-04:00