cve 2025 68384

CVE-2025-68384 is a high-severity vulnerability affecting Elasticsearch versions 8.x and 9.x. It allows an authenticated low-privileged user to trigger uncontrolled resource allocation, leading to an out-of-memory (OOM) denial-of-service condition that can crash Elasticsearch processes. This issue is critical for enterprise environments relying on Elasticsearch for logging, search, and analytics. Patches are available from the vendor, and operators are urged to update immediately to prevent service disruption. The vulnerability underscores the importance of timely patch management in IT infrastructure.