Elasticsearch is vulnerable to uncontrolled recursion (CWE-674) that enables an attacker with read access to a single index to craft a scripted runtime field whose script produces a deeply nested geometry structure. When the node processes this request it recurses past the available stack space, causing a crash. The failure results in a denial of service that may persist until manual intervention restores the affected node.

The flaw affects Elastic's Elasticsearch wherever script-generated geometry values are not bounded during serialization. Affected versions are not specified, but any deployment that lacks a recursion depth cap on script‑generated geometry is potentially susceptible. An attacker must have authenticated read rights to an index that allows scripted runtime fields. Elastic's official documentation does not yet specify a patch version.

EPSS indicates a very low probability of exploitation, less than 1%, making spontaneous attacks unlikely. The CVSS of 6.5 labels the flaw as moderate severity. The vulnerability is not recorded in CISA’s KEV catalog, suggesting no active exploitation has been observed. Attackers need authenticated read access to an index that allows scripted runtime fields, so the primary threat vector is an insider or compromised‑credential scenario. When triggered, the recursion causes a stack overflow that crashes the node; the service may stay down until a manual or automated restart restores the affected node.