Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
Elasticsearch could use wrong DNS settings for some clients
published 1 month ago
Summary
When several Elasticsearch clients run with different DNS configurations, the underlying network library may reuse a DNS resolver that was set up for a previous client. This can cause queries to be sent to the wrong address, leading to failed connections or data being delivered to unintended destinations. Update Elasticsearch to the latest release that includes the fix or apply the vendor's recommended patch and verify your DNS configuration for each client.
What to do
- Update cleanstart elasticsearch to version 9.2.8-r5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | elasticsearch |
< 9.2.8-r5 Fix: upgrade to 9.2.8-r5
|
Original advisory text
In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver
Security vulnerability affects the elasticsearch package. In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published29 Sep 2026
Updated29 Sep 2026
First seen29 Sep 2026
Sources
CLEANSTART-2026-IJ88105 · OSV
Track software like this
Free during beta