4.9

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-68390

CVE-2025-68390: Elasticsearch privileged authenticated users can cause DoS through Excessive Resource Allocation

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-68390

CVE-2025-68390:

4.9

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
org.elasticsearch.plugin:x-pack-core	maven	< 8.19.8	8.19.8
org.elasticsearch.plugin:x-pack-core	maven	>= 9.0.0, < 9.1.8	9.1.8
org.elasticsearch.plugin:x-pack-core	maven	>= 9.2.0, < 9.2.2	9.2.2

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is an integer overflow that occurs in multiple data builder classes within Elasticsearch's ES|QL engine. When creating or resizing data blocks (e.g., BooleanBlockBuilder, DoubleBlockBuilder), the code calculates the required memory by multiplying the number of elements by the size of each element. Both of these values are integers. If a malicious user provides input that leads to a very large number of elements, this multiplication can overflow the 32-bit integer range, resulting in a small or negative number. This incorrect size is then passed to a memory circuit breaker, which fails to detect the massive allocation that is about to happen. Consequently, the JVM attempts to allocate a huge chunk of memory, leading to an OutOfMemoryError and a Denial of Service. The patch addresses this by casting the multiplication operands to long, a 64-bit integer, which prevents the overflow and ensures the circuit breaker receives the correct memory size.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.