cve 2025 68390

CVE-2025-68390 is a high-severity vulnerability in Elasticsearch that allows an authenticated user with snapshot restore privileges to trigger excessive memory allocation and cause a denial-of-service (DoS) condition via a crafted HTTP request. Elastic has released security updates in specific maintenance releases to address the flaw. Organizations running affected Elasticsearch versions should prioritize patching, validate their exposure, and apply compensating controls until fixes are deployed. This tag covers discussions about the vulnerability details, affected versions, mitigation steps, and upgrade guidance for Elasticsearch operators.