This vulnerability involves uncontrolled resource consumption (CWE-400) in Elasticsearch. Specifically, an attacker with search privileges can submit a specially crafted search request that triggers excessive memory allocation (CAPEC-130) on a data node. This causes the node to exhaust its available heap memory, leading to node unavailability and overall cluster degradation. The impact is denial of service requiring manual recovery of the cluster. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact.

The vulnerability allows denial of service by exhausting heap memory on Elasticsearch data nodes, causing node unavailability and cluster degradation. This leads to cluster downtime that requires manual intervention to restore service. There is no impact on confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, monitor for unusual search requests and consider restricting search privileges to trusted users to reduce risk.