Uncontrolled Resource Consumption (CWE‑400) in Elasticsearch can lead to a denial‑of‑service when an attacker sends requests that cause the cluster to allocate excessive memory or CPU. The issue is linked to Excessive Allocation (CAPEC‑130), meaning that repeatedly crafted queries can push the engine beyond its normal operating thresholds. The resulting denial of service can prevent the search service from responding to legitimate traffic, disrupting any downstream applications that rely on the cluster.

Affected product is Elastic:Elasticsearch. No specific versions are enumerated in the data, so any deployment of Elasticsearch that lacks the resource‑consumption fix could be vulnerable.

The CVSS score of 6.5 indicates moderate severity. EPSS data is unavailable, so the spread of exploitation cannot be quantified. The vulnerability is not currently listed in the CISA KEV catalog, suggesting no confirmed exploits. Attackers would likely target the Elasticsearch HTTP/JSON API, but the lack of explicit vector information means a variety of input methods could potentially trigger the issue.