{"data":{"id":"92968645-0c2a-4f52-8de3-c7770634c7f7","title":"CVE-2026-56149: Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via…","summary":"CVE-2026-56149 is an Allocation of Resources Without Limits or Throttling flaw (CWE-770) in Elasticsearch that can lead to denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the affected node unavailable. NVD has not yet provided an assessment, and the record was published on 07/01/2026.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-56149","publishedAt":"2026-07-01T17:16:36.957Z","cveId":"CVE-2026-56149","cweIds":["CWE-770"],"cvssScore":"4.9","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Elasticsearch","Elasticsearch machine learning"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Elasticsearch denial of service through excessive memory use","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"high","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.005,"epssCheckedAt":"2026-10-14T12:12:42.648Z","kevDateAdded":null,"advisoryAliases":["GHSA-p6pw-6f2m-xxpg"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:47:09.961Z","patchAvailable":null,"disclosureDate":"2026-07-01T17:16:36.957Z","capecIds":["CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}