Elasticsearch fails to enforce its configurable input length restriction on patterns provided by users in intervals queries. When a deeply nested pattern is compiled, it causes uncontrolled recursion that exhausts the thread stack, leading to a fatal error that terminates the Elasticsearch node process. This denial of service can be triggered by an authenticated user with only read privileges on a single searchable index via a small search request.

The vulnerability results in a denial of service condition by crashing the Elasticsearch node process. There is no impact on confidentiality or integrity, but availability is affected due to node termination. The attack requires authenticated read-only access, limiting the attacker scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted users and monitor for unusual search patterns that could exploit this vulnerability.