CyberRota Analysis
AI-GeneratedElasticsearch is vulnerable to a denial-of-service condition triggered by an authenticated user with access to the simulate pipeline API, allowing them to create a self-referential data structure that leads to unbounded recursion. This flaw can cause the affected node process to terminate unexpectedly, impacting service availability. Organizations using Elasticsearch should prioritize patching this vulnerability to mitigate potential disruptions in service.
Original NVD Description
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate) to submit a request that causes a self-referential data structure to be created. When a specific internal component later processes that structure, the operation recurses without bound and raises a fatal error that is not handled by the surrounding execution path, terminating the affected node process and resulting in a denial of service.