Elastic: >> Fleet Server >> 8.17.5 Security Vulnerabilities
Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker can submit a specially crafted request to an upload endpoint that causes excessive memory consumption, which may render Fleet Server unavailable.
CVSS Score
6.5
EPSS Score
0.003
Published
2026-07-01