Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
Elasticsearch may use wrong DNS settings causing misdirected queries
published 4 days ago
Summary
When several Elasticsearch clients use different DNS configurations, the underlying network library can mistakenly reuse an old DNS resolver. This can lead to queries being sent to the wrong server, potentially exposing data or causing service errors. Update Elasticsearch to the latest version or ensure all clients share the same DNS settings to avoid the issue.
What to do
- Update cleanstart elasticsearch to version 9.3.8-r8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | elasticsearch |
< 9.3.8-r8 Fix: upgrade to 9.3.8-r8
|
Original advisory text
In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver
Security vulnerability affects the elasticsearch package. In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLEANSTART-2026-UA66852 · OSV
Track software like this
Free during beta