Elasticsearch fails to enforce user‑supplied pattern length limits for an intervals query, causing uncontrolled recursion that exhausts the node thread stack. The resulting fatal error stops the Elasticsearch node, making that node unavailable for legitimate use. The flaw is triggered by a single authenticated, read‑only query and does not give the attacker additional privileges or code execution capability.

Elastic Elasticsearch instances are affected. No exact version range is specified, but the issue exists in configurations where the intervals query is enabled and the input length check is bypassed.

The CVSS score is 6.5, indicating a moderate severity. No EPSS value is available, so exploitation likelihood is uncertain, yet the flaw can be triggered by any authenticated user with read‑only access—an attacker does not need elevated rights. The vulnerability is not listed in CISA’s KEV catalog. The only requirement to exploit is to submit a specially crafted pattern in a search request to an index the user can read.