CyberRota Analysis
AI-GeneratedElasticsearch is vulnerable to a denial of service due to a reachable assertion triggered by specially crafted search requests containing null values in specific query clauses. This vulnerability allows low-privileged authenticated users with read access to terminate the affected node process, impacting search availability and reducing cluster capacity in multi-node deployments. Organizations using Elasticsearch, particularly those with multi-node configurations, should prioritize addressing this issue to maintain service continuity and prevent disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted search request containing a null value in a specific query clause causes an internal assertion to be raised during query parsing. Because Elasticsearch treats assertion failures as fatal errors, this terminates the affected node process. A low-privileged authenticated user with read access to at least one index can exploit this condition with a single request to cause a node to terminate, disrupting search availability. In a single-node deployment this fully stops Elasticsearch; in a multi-node cluster it reduces cluster capacity for each affected node.
Related CVEs
Other vulnerabilities affecting the same vendor(s)