This vulnerability arises from uncontrolled recursion within the Elasticsearch query evaluation component. A user with read-level index access can submit a crafted search request that triggers unbounded recursive processing, resulting in a fatal error that terminates the node process. The impact is denial of service due to node termination and restart cycles. The CVSS 3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact. No patch or official remediation is currently documented, and no known exploits are reported in the wild.

The vulnerability causes denial of service by crashing Elasticsearch nodes through unbounded recursion triggered by a low-privileged authenticated user. Single-node deployments experience complete service outage, while multi-node clusters suffer repeated node restarts and sustained availability degradation. There is no impact on confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict read-level index access to trusted users only to reduce risk. Monitor for unusual node restarts and investigate suspicious search requests. No official patch or workaround is currently documented.