Elasticsearch 9.3.2 → 9.4.6
13 releases · 0 breaking changes · 37 security fixes · 25 advisories fixed
37security0breaking0deprecated167feature251fix
Vulnerabilities fixed by this upgrade
- 6.5 CVE-2026-103006 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch…
- 5.4 CVE-2026-102407 Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user wi…
- 6.5 CVE-2026-82294 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).
- 5.4 CVE-2026-78607 Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse (CAPEC-122). A user holding only inference execution privileges…
- 5.9 CVE-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy dep…
- 8.8 CVE-2026-72649 Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586). A specially crafted trained model art…
- 6.5 CVE-2026-72684 A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific…
- 4.3 CVE-2026-72685 A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document o…
- 6.5 CVE-2026-72686 A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a rec…
- 6.5 CVE-2026-72687 A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier befo…
- 6.5 CVE-2026-72679 Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested pattern drives unbounded recursion that e…
- 6.5 CVE-2026-72683 A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation…
- 6.5 CVE-2026-72647 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single…
- 6.5 CVE-2026-72636 Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation (CAPEC-130). The matcher used to resolve wildcard patterns ag…
- 6.5 CVE-2026-72638 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only low-privileged index creation permissions…
- 6.5 CVE-2026-72639 Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit brea…
- 6.5 CVE-2026-72645 Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only read privileges on a si…
- 6.5 CVE-2026-63263 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially crafted query to…
- 6.5 CVE-2026-63144 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index…
- 6.5 CVE-2026-63140 Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted search request containing a null value in a specific query…
- 6.5 CVE-2026-63136 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search…
- 5.3 CVE-2026-56144 Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By…
- 6.5 CVE-2026-56145 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL s…
- 6.5 CVE-2026-56148 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query that causes excess…
- 4.9 CVE-2026-56149 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a sp…
Breaking changes
None in the release notes.
Security changes
- security Fixes CVE-2026-103006: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch… in 9.4.6
- security Fixes CVE-2026-82294: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). in 9.4.6
- security Fixes CVE-2026-72649: Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586). A specially crafted trained model art… in 9.4.5
- security Fixes CVE-2026-72642: The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model,… in 9.4.5
- security Fixes CVE-2026-72684: A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific… in 9.4.5
- security Fixes CVE-2026-72686: A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a rec… in 9.4.5
- security Fixes CVE-2026-72687: A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier befo… in 9.4.5
- security Fixes CVE-2026-72678: Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure. An authenticated user holding only read pri… in 9.4.5
- security Fixes CVE-2026-72679: Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested pattern drives unbounded recursion that e… in 9.4.5
- security Fixes CVE-2026-72647: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single… in 9.4.5
- security Fixes CVE-2026-72636: Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation (CAPEC-130). The matcher used to resolve wildcard patterns ag… in 9.4.5
- security Fixes CVE-2026-72638: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only low-privileged index creation permissions… in 9.4.5
- security Fixes CVE-2026-72639: Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit brea… in 9.4.5
- security Fixes CVE-2026-72645: Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only read privileges on a si… in 9.4.5
- security Fixes CVE-2026-78605: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy dep… in 9.4.5
- security Fixes CVE-2026-72685: A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document o… in 9.4.5
- security Fixes CVE-2026-72683: A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation… in 9.4.4
- security Fixes CVE-2026-63263: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially crafted query to… in 9.4.4
- security Fixes CVE-2026-63144: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index… in 9.4.4
- security Fixes CVE-2026-63140: Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted search request containing a null value in a specific query… in 9.4.4
- security Fixes CVE-2026-56145: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL s… in 9.4.4
- security Fixes CVE-2026-102407: Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user wi… in 9.4.4
- security Fixes CVE-2026-78607: Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse (CAPEC-122). A user holding only inference execution privileges… in 9.4.4
- security Fixes CVE-2026-56144: Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By… in 9.4.4
- security Fixes CVE-2026-56148: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query that causes excess… in 9.4.3
- security Fixes CVE-2026-56149: Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a sp… in 9.4.3
- security Fixes CVE-2026-72683: A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation… in 9.3.8
- security Fixes CVE-2026-63263: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially crafted query to… in 9.3.8
- security Fixes CVE-2026-63144: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index… in 9.3.8
- security Fixes CVE-2026-63140: Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted search request containing a null value in a specific query… in 9.3.8
- security Fixes CVE-2026-102407: Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user wi… in 9.3.8
- security Fixes CVE-2026-78607: Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse (CAPEC-122). A user holding only inference execution privileges… in 9.3.8
- security Fixes CVE-2026-56145: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL s… in 9.3.7
- security Fixes CVE-2026-56144: Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By… in 9.3.7
- security Fixes CVE-2026-56148: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query that causes excess… in 9.3.6
- security Fixes CVE-2026-56149: Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a sp… in 9.3.6
- security Fixes CVE-2026-63136: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search… in 9.3.4
Every release in between
securityFixes CVE-2026-103006: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch…
securityFixes CVE-2026-82294: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).
featureGrant kibana_system access to PingDirectory indices so ILM can delete them #156029
featureUpgrade Bouncy Castle FIPS to 1.0.2.7 and 2.0.2 #156296
featureUpgrade ASM to 9.10.1 #156213
featureUpgrade the bundled JDK to 26.0.2 #156203
featureAdd EuroBERT and Jina v5 ops to graph validation allowlist #3015
featureHarden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
featureImprove adherence to memory limits for the bucket gatherer #2848
featureImprove error handling for quantiles state documents #2894
featureImprove handling of invalid JSON state documents #2895
featureImprove messages when a process is stopped after running out of memory #2841
featureLower the log severity of recoverable errors #2889
featureReport the actual memory usage of the autodetect process #2846
featureRestrict file system access for PyTorch models #2851
featureUpgrade PyTorch to 2.7.1 #2863
featureImprove search throughput by removing a lock in query cache stats lookup #156902
featureUpgrade httpclient5 to 5.6.4 #157564
fixFix percentiles aggregations failing with an already closed breaker error #157254 (issue: #157206)
fixFix rank estimation ignoring min and max in exponential histograms #156268 (issue: #156057)
fixRetry writes when the target primary is unassigned during a shard split #157255 (issue: #156982)
fixFix deletes silently skipped on TSDB indices that use synthetic _id #156903 (issue: #151326)
fixAccount for deferred aggregation memory in the request circuit breaker #155600 (issue: #148516)
fixAccount for t-digest percentiles memory in the request circuit breaker #155586
fixFix TS queries that name a time bucket after the timestamp field #155623
fixFix incorrect results when sorting on multiple keys with a LIMIT #155923
fixFix unresolved columns in CASE with CIDR_MATCH and implicit ip casts #156162 (issue: #155979)
fixReduce overhead of TS queries by pruning unused dimension fields #157250
fixReject 2^63 when converting double to long #157555 (issue: #157551)
fixReject COUNT_DISTINCT precision thresholds outside the integer range #157553 (issue: #157549)
fixFix Google Vertex AI tool calls with non-string argument values #156665 (issue: #156644)
fixFix inference and security cache clearing on multi-node clusters #156603
fixFix NullPointerException from async telemetry instruments at shutdown #157161
fixFail closed when the TorchScript state hook scan is incomplete #3149
fixFail gracefully when restoring a categorizer with an out-of-range token ID #3143
fixFix LFU cache count drift when a lock times out #3090
fixFix flaky CIoManagerTest/testFileIoGood test #3017
fixFix machine learning daily maintenance failing when security is enabled #148554
fixMark the machine learning controller non-dumpable before accepting commands #3081
fixRe-audit repeated datafeed extraction errors instead of reporting once #157565
+16 more items in the release notessecurityFixes CVE-2026-72649: Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586). A specially crafted trained model art…
securityFixes CVE-2026-72642: The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model,…
securityFixes CVE-2026-72684: A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific…
securityFixes CVE-2026-72686: A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a rec…
securityFixes CVE-2026-72687: A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier befo…
securityFixes CVE-2026-72678: Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure. An authenticated user holding only read pri…
securityFixes CVE-2026-72679: Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested pattern drives unbounded recursion that e…
securityFixes CVE-2026-72647: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single…
securityFixes CVE-2026-72636: Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation (CAPEC-130). The matcher used to resolve wildcard patterns ag…
securityFixes CVE-2026-72638: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only low-privileged index creation permissions…
securityFixes CVE-2026-72639: Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit brea…
securityFixes CVE-2026-72645: Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only read privileges on a si…
securityFixes CVE-2026-78605: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy dep…
securityFixes CVE-2026-72685: A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document o…
featureUpdate Bouncy Castle FIPS TLS libraries #155937
featureUpgrade lz4-java to 1.11.1 #155598
featureAdd policy_base_id field to fleet-agents and fleet-policies index templates #154521
featureAdd EuroBERT and Jina v5 ops to the graph validation allowlist #3015
featureDowngrade log severity for a batch of recoverable errors #2889
featureHarden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
featureImprove adherence to memory limits for the bucket gatherer #2848
featureImprove error handling for quantiles state documents #2894
featureImprove handling of invalid JSON state documents #2895
featureImprove messaging for OOM process termination #2841
featureReport the actual memory usage of the autodetect process #2846
featureRestrict file system access for PyTorch models #2851
featureUpdate the PyTorch library to version 2.7.1 #2863
featureAdd security stats to the monitoring mapping #155552
featureUpgrade Apache HttpComponents 5.x to address CVEs #153057
featureUpgrade Apache HttpCore 5 to 5.4.3 to fix header DoS CVEs #153467
featureUpgrade Bouncy Castle to 1.85 #155819
featureUpgrade Jackson to 2.18.9 #154569
featureUpgrade Log4j to 2.26.1 #154115
featureCache little-endian float layout in the DiskBBQ scalar corrections loop #154373
fixAdd a check against self-referencing filters #154793
fixTrip the request breaker on term and phrase suggesters based on backing array estimates #154837
fixAllow garbage collection of closed search contexts in ES|QL #155418
fixAvoid an integer overflow loop in the REPEAT function #154295
fixFix FROM_BASE64 generating invalid non-UTF-8 strings. Previously it could create binary values that ES|QL does not support in other operations; only valid UTF-8 is supported, and invalid cases now return null with a warning. #154955
fixFix MV_SORT incorrectly allowing geospatial types, which are not sortable #154417
+36 more items in the release notessecurityFixes CVE-2026-72683: A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation…
securityFixes CVE-2026-63263: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially crafted query to…
securityFixes CVE-2026-63144: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index…
securityFixes CVE-2026-63140: Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted search request containing a null value in a specific query…
securityFixes CVE-2026-56145: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL s…
securityFixes CVE-2026-102407: Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user wi…
securityFixes CVE-2026-78607: Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse (CAPEC-122). A user holding only inference execution privileges…
securityFixes CVE-2026-56144: Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By…
featureUpgrade OpenTelemetry in ms-graph-authz #151968
featureImplement watchdog timeout for GROK #152851
featureUpdate commons-text library version to match commons-lang3 #152092
featureUpgrade jackson #152163
featureAdd EuroBERT and Jina v5 ops to graph validation allowlist #3015
featureDowngrade log severity for a batch of recoverable errors #2889
featureHarden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
featureImprove adherence to memory limits for the bucket gatherer #2848
featureImprove error handling for quantiles state documents #2894
featureImprove handling of invalid JSON state documents #2895
featureImprove messaging for OOM process termination #2841
featureReport the actual memory usage of the autodetect process #2846
featureRestrict file system access for PyTorch models #2851
featureUpdate the PyTorch library to version 2.7.1 #2863
fixAvoid OOMs by accounting for memory during cardinality agg reduction phase #152773 (issue: #150290)
fixFix NPE when aggregation param scripts return null #152152 (issue: #136639)
fixFix Clone API Key silently dropping fields that follow a null expiration #152874
fixFix data stream privilege checking #148179
fixImprove simulate bulk action authz #152148
fixAvoid dense run-length allocation in HLL #152035
fixCall Project.output() only when Project.expressionsResolved() is true #151697 (issue: #149681)
fixFix UnsupportedOperationException for partially unmapped keyword fields with multi-fields #150676 (issue: #150667)
fixFix errors and warnings with spatial functions that parse invalid BBOX #152877 (issue: #152876)
fixResolve NoSuchElementException in ViewUnionAll analyzer retries #152867
fixResolve prefixed searchable-snapshot backing indices to their data stream in METRICS_INFO/TS_INFO #153128
fixTreat empty list query parameters as null #152098 (issue: #152271)
fixFix infinite loop in GeoLineDecomposer dateline crossing checks #152096 (issue: #152066)
fixTranslate tools and tool_choice to Anthropic format for Google Model Garden Anthropic chat completion #152427
fixInclude ingest metadata in self reference checks #152932
fixAutomatically repair ML anomaly results aliases pointing at a .reindexed-v7 index #147688 (issue: #147686)
fixExtend AD results template for reindexed indices and generalize heal beyond job_id mapping #153755 (issue: #147686)
fixFix ML jobs stuck in starting state on Serverless trial projects #150362
+15 more items in the release notessecurityFixes CVE-2026-56148: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query that causes excess…
securityFixes CVE-2026-56149: Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a sp…
featureAdd filter capture for ESQL query #149535
featureUpgrade Apache Iceberg to 1.10.2 #151664
feature[Inference] Add requires org.apache.commons.lang3 to module-info #151794
featureAdd query filter logging to SQL and EQL queries #150127
featureAdd EuroBERT and Jina v5 ops to graph validation allowlist #3015
featureBetter error handling regarding quantiles state documents #2894
featureBetter handling of invalid JSON state documents #2895
featureBetter messaging regarding OOM process termination #2841
featureDowngrade log severity for a batch of recoverable errors #2889
featureHarden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
featureImprove adherence to memory limits for the bucket gatherer #2848
featureReport the actual memory usage of the autodetect process #2846
featureRestrict file system access for pytorch models #2851
featureUpdate the PyTorch library to version 2.7.1 #2863
fixFix AVLTreeDigest CDF monotonicity for penultimate centroid #151181 (issue: #151012)
fixFix non-monotonic T-Digest centroids caused by floating-point errors #151979
fixAvoid long overflows on AVG by casting to double #148519 (issue: #99575)
fixCarry over synthetic attributes from conversions to the Project above UnionAll #149775 (issue: #149509)
fixFix ValuesReader assertion error #149683
fixFix subquery/fork with inline stats pruning #149783 (issue: #149589)
fixFix wildcard view resolution losing duplicate copies #149418 (issue: #149416)
fixMake subquery with counter type not present in all branches behave more consistently #150704 (issues: #150640, #150641, #150644, #150645)
fixResolve surrogates in union type field resolution before plan serialization #151633 (issue: #151475)
fixPass through includeSourceInError #142335
fixFix bug causing incorrect error on force deleting already deleted model #107188 (issue: #105420)
fixFix flaky CIoManagerTest/testFileIoGood test #3017
fixRevert "[ML] Add extra validation in trained_model creation" #152000
fixDon't allow runtime fields to shadow fields used in index sort #150636 (issue: #149500)
fixFix division of max_docs between slices in reindex #150808
fixFix CLI tests failures due to unconsumed output #145967 (issues: #143646, #143645)
fixGuard against null zeroTermsQuery in cross_fields multi_match #149935 (issue: #149934)
fixIds Query: Throw IllegalArgumentException #151234 (issue: #150305)
fixRun remote child task cancellation as system user #150560
fixFix prefix escape for synthetic id #150433 (issue: #150389)
fixFix GPU SQ format name to match CPU equivalent #149512 (issue: #148975)
featureUpgrade to log4j 2.26.0 #132166 (issue: #132035)
featureAdd EuroBERT and Jina v5 ops to graph validation allowlist #3015
featureBetter error handling regarding quantiles state documents #2894
featureBetter handling of invalid JSON state documents #2895
featureBetter messaging regarding OOM process termination #2841
featureDowngrade log severity for a batch of recoverable errors #2889
featureHarden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
featureImprove adherence to memory limits for the bucket gatherer #2848
featureReport the actual memory usage of the autodetect process #2846
featureRestrict file system access for pytorch models #2851
featureUpdate the PyTorch library to version 2.7.1 #2863
featureAdd logging tracking to _xpack/usage #148087
fixAggs: Account aggs uncompressed size on coordinator reduction #148885 (issue: #147190)
fixAggs: Fix auto_date_histogram/date_histogram inside a global agg #147427 (issue: #92570)
fixFix ArrayIndexOutOfBoundsException in date_histogram with hard_bounds outside data #148765 (issue: #148763)
fixFix CCR follow to handle indexing_complete race #145304
fixFix FsBlobContainer.moveBlobAtomic fallback on CIFS filesystems #148777 (issue: #148811)
fixDisallow casting to snapshot-only type #148813 (issue: #147867)
fixFix "optimized incorrectly" error from project reorder #149053 (issue: #148612)
fixFix ArrayIndexOutOfBoundsException in centroid grouping evaluateFinal #148815 (issue: #141318)
fixFix FROM *_logs index name validation #149395 (issue: #146073)
fixFix InvalidMappedField equals/hashCode and lazy error message #146117 (issue: #145907)
fixFix errors in blockloaders when filtering nulls on histograms #148983 (issue: #147854)
fixLucene TermsEnum and PostingsEnum may only be used from acquiring thread #149297
fixNode-reduce driver should not release search contexts on failure #145960 (issue: #145509)
fixNormalize _timeseries to JSON for stored source #148716 (issue: #148414)
fixUse search threadpool for coordination in ES|QL #149034
fixHonor task settings for Amazon Bedrock and Google Vertex chat completion #149268 (issue: #148792)
fix[Inference API] Fix NPE for Inference usage when referencing a embedding task type #149636
fix[Inference API] Fixing potential NPE if InferenceContext is null #148921
fix[Inference API] Use image/jpeg instead of image/jpg for inference validation MIME type #148793
fixPin server-launcher native -march to x86-64-v2 #148542 (issue: #148326)
fixUse toTruncatedString in chunked objects toString #147860 (issue: #143694)
fixMonitor exceptions in processing queries and log them as failures #148362
fixFix flaky CIoManagerTest/testFileIoGood test #3017
fixDefault PromQL index to metrics-* #148489
fixDefault Prometheus discovery APIs to metrics-* #148770
fixFix REPLACE with empty pattern #148616
fixDefault exclude_inference_fields to exclude_vectors at REST #148527 (issue: #146425)
fixFix UOE in CanMatch empty-shards skipped-by-cluster map #148754
+7 more items in the release notesfeatureAdd EuroBERT and Jina v5 ops to graph validation allowlist #3015
featureBetter error handling regarding quantiles state documents #2894
featureBetter handling of invalid JSON state documents #2895
featureBetter messaging regarding OOM process termination #2841
featureDowngrade log severity for a batch of recoverable errors #2889
featureHarden pytorch_inference with TorchScript model graph validation #3008 (issue: #2890)
featureImprove adherence to memory limits for the bucket gatherer #2848
featureReport the actual memory usage of the autodetect process #2846
featureRestrict file system access for pytorch models #2851
featureUpdate the PyTorch library to version 2.7.1 #2863
featureBump bundled JDK to Java 26.0.1 #147424
featureUpdate bundled JDK to Java 26 #146167
featureUpdate elastic-apm-agent-java8 to 1.55.6 #148271
fixUpdate failure store redirect logic to exclude backpressure exceptions #148154
fixBugfix - Block Loader Pushdown + Union Types #147940
fixDisallow empty lists in named params, only #147748 (issue: #147448)
fixES|QL query approximation: enforce minimum number of sampled source rows #147886
fixImplement RerankingInferenceService for Elastic service #148365
fix[Inference API] Fix inference initialization thread exhaustion #147063
fixFix flaky CIoManagerTest/testFileIoGood test #3017
fix[DiskBBQ] Check that precondition should not be overwritten on update #148111 (issue: #148004)
fixFix race in TickerScheduleTriggerEngine by checking watcher to node allocation #147678 (issue: #146874)
featureIt now provides 3x or more better search performance on very restrictive filters (prefilters on centroids)
featureProvides a way to condition non iid vectors (expert API for now)
featureGives more bit options (1, 2, 4, and 7 bits!)
featureMore native code improvements for overall performance
featureAccepts the standard Prometheus range query parameters (query, start, end, step, optional index)
featureTranslates the PromQL expression into an ES|QL PROMQL command and executes it via EsqlQueryAction
featureConverts the columnar ES|QL response into the Prometheus matrix JSON format and returns it to the caller
featureBump heap usage limits for INLINE STATS #144679
featureInject circuit breaker into forked SynonymMapBuilder #144800
featureSupport custom rulesets in analysis-icu/icu-transform plugin #143060
featureAdd Clone API Key endpoint #142633 (issue: #59304)
featureUpdate View CRUD Actions to be Index Actions #141570
feature[Entity Store] Add permissions for Entity Store datastream #145981
featureCPS and project routing support for templated searches #139446
featureDo not mark bulk indexing requests as retried after primary relocations #142157 (issue: #141586)
featureAdd dynamic bloom filter sizing based on document count #141342
featureAdd panama simd implementation of contains function for BinaryDocValuesContainsTermQuery #143922
featureAllow loading BYTE_LENGTH without decompressing Zstd byte ref blocks #141322
featureES819 Binary doc values: compact doc offsets using bit packing #142772
featureEnable large blocks for binary doc values by default. This mainly affects fields of type wildcard, ignored source, values hitting ignore above threshold and ignore malformed numbers and dates. #145216
featureFast codePointCount implementation for BytesRef #140388
featurePush contains binary doc values query down to es819 codec #143898
featureRewrite *substring* wildcard queries to contains term queries for binary doc values keywords #143433
featureTrack bloom filter disk usage in IndexDiskUsageAnalyzer #142106
featureUpgrade zstd to version 1.5.7 #140530
featureUse DirectAccessInput in ZstdDecompressor to avoid intermediate heap copy #145658
featureUse max instead of median for merged bloom filter size #143302
featureCodePointCount implementation using Panama vectors API #140693 (issue: #140567)
featureAdd 'logs.otel' and 'logs.ecs' stream types #141564 (issue: #141040)
featureEnsure DLM only runs one general loop at a time #143883
featureSupport Failure Stores in Cross Cluster Search #139316
featureBatch index creation #144074
featureBatch snapshot update tasks after external change #142091
featureEnsure that synthetic _id is usable after restarts/relocations #138678
featureHealth reports GREEN when provisionally unassigned replica #144773
featureIncrease the per-index limit for merges to half the CPUs #141389
featureOpt-in persistent task reassignment on node shutdown #143306
featureCollect dimensions only once per tsid when downsampling #145089
featureRate calculation for downsampled counters becomes aware of counter resets when the aggregate sampling method is used. #143381 (issue: #136178)
featureUse the tdigest type and compression from TDigest in downsampling #143247
+473 more items in the release notessecurityFixes CVE-2026-72683: A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation…
securityFixes CVE-2026-63263: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially crafted query to…
securityFixes CVE-2026-63144: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index…
securityFixes CVE-2026-63140: Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted search request containing a null value in a specific query…
securityFixes CVE-2026-102407: Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user wi…
securityFixes CVE-2026-78607: Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse (CAPEC-122). A user holding only inference execution privileges…
featureUpgrade OpenTelemetry in ms-graph-authz #151968
featureImplement watchdog timeout for GROK #152851
featureUpdate the commons-text library version to match commons.lang3 #152092
featureUpgrade Jackson #152163
featureBetter messaging regarding OOM process termination #2841
featureImprove adherence to memory limits for the bucket gatherer #2848
featureReport the actual memory usage of the autodetect process #2846
featureRestrict file system access for pytorch models #2851
featureUpdate the PyTorch library to version 2.7.1 #2863
fixAvoid out-of-memory errors by accounting for memory during the cardinality aggregation reduction phase #152773 (issue: #150290)
fixFix non-monotonic T-Digest centroids caused by floating-point errors #151979
fixFix null pointer exception when aggregation parameter scripts return null #152152 (issue: #136639)
fixFix data stream privilege checking #148179
fixImprove authorization for the simulate bulk action #152148
fixAvoid dense run-length allocation in HyperLogLog #152035
fixFix infinite loop in GeoLineDecomposer dateline crossing checks #152096 (issue: #152066)
fixTranslate tools and tool_choice to Anthropic format for Google Model Garden Anthropic chat completion #152427
fixInclude ingest metadata in self-reference checks #152932
fixAutomatically repair ML anomaly results aliases pointing at a .reindexed-v7 index #147688 (issue: #147686)
fixExtend the anomaly detection results template for reindexed indices and generalize healing beyond job_id mapping #153755 (issue: #147686)
fixFix ML jobs stuck in starting state on Serverless trial projects #150362
fixRoll reindexed ML state indices in daily maintenance #149555
fixAdd defensive protections when parsing query_string #152385
fixApply search timeout to the DFS phase query rewrite #153479
fixApply search timeout to the query rewrite step #153082 (issue: #104187)
fixFork ensureShardSearchActive callbacks off the refresh thread #152509 (issue: #97280)
fixReturn a 400 (Bad Request) for invalid tokens in a script query #152476
fixTrip request breaker on large completion suggest size/shardSize #152552
fixFix snapshot creation on CIFS shares when an access-denied exception occurs #153219 (issue: #152053)
fixIgnore OTLP number data points without a value #152733
fixTighten retry startup logic #152803
securityFixes CVE-2026-56145: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL s…
securityFixes CVE-2026-56144: Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By…
feature[Inference] Add requires org.apache.commons.lang3 to module-info #151794
featureBetter messaging regarding OOM process termination #2841
featureImprove adherence to memory limits for the bucket gatherer #2848
featureReport the actual memory usage of the autodetect process #2846
featureRestrict file system access for pytorch models #2851
featureUpdate the PyTorch library to version 2.7.1 #2863
fixResolve surrogates in union type field resolution before plan serialization #151633 (issue: #151475)
fixPass through includeSourceInError #142335
fixFix bug causing incorrect error on force deleting already deleted model #107188 (issue: #105420)
fixRevert "[ML] Add extra validation in trained_model creation" #152000
securityFixes CVE-2026-56148: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query that causes excess…
securityFixes CVE-2026-56149: Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a sp…
featureUpdate the built-in kibana_system role to grant manage, create_index, read, index, write, and delete privileges on the axonius.alert_finding and axonius.incident indices, replacing the previous axonius.alert_and_incident index #149797
feature[otel-data] Explicitly map http.response.status_code as long #149631
featureUpgrade commons-lang3 version for the inference plugin #150242
featureBetter messaging regarding OOM process termination #2841
featureImprove adherence to memory limits for the bucket gatherer #2848
featureReport the actual memory usage of the autodetect process #2846
featureRestrict file system access for pytorch models #2851
featureUpdate the PyTorch library to version 2.7.1 #2863
featureUpgrade netty to 4.1.135.Final #151099
featureOptimize literal action automaton builds #151093 (issues: #123872, #105723)
fixFix Nynorsk stemmer UnsupportedOperationException. The light_nynorsk and minimal_nynorsk stemmers no longer fail with an HTTP 500 error during index creation due to passing an immutable map to Lucene's analysis factory. #150345
fixMove SAML metadata resolution to background thread #144381 (issue: #138031)
fixCatch StackOverflowError in deeply nested RLIKE patterns #150238 (issue: #149838)
fixEnforce limit for max nested functions #149971
fixFix wrong warning in expressions with unrolled multivalues #145968
fix[ESQL] Refactor Greatest and Least functions to use evaluator map #128429 (issue: #114036)
fixTruncate error for ILM's step_info instead of string #150413
fixValidate inference embedding model before checking for existing uses #150150 (issues: #147062, #150084)
fixWhen a streaming inference request is canceled, immediately release apache client networking resources #149987
fix[Inference API] Fix Streaming publisher shutdown race condition #150789 (issue: #150742)
fixDon't apply time zones to epoch-based timestamps #148663
fixFilter _source field names by code point #151146
fixFix OS stats for cgroup paths containing colons #151095
fixAdd extra validation in trained_model creation #150227
fixEQL/SQL: Enforce max expression depth checks #150003
fixAdd IT covering search during rolling restart #149667 (issue: #86927)
fixMake Automatons wildcard code-point aware #151143
fixFix OTLP histogram handling for single-count histograms without bucket boundaries #151411
fixHonor ClusterHealth timeout when waiting for transform internal index shards #149462 (issue: #149400)
featureUpgrade to log4j 2.26.0 #132166 (issue: #132035)
featureBetter messaging regarding OOM process termination #2841
featureImprove adherence to memory limits for the bucket gatherer #2848
featureReport the actual memory usage of the autodetect process #2846
featureRestrict file system access for pytorch models #2851
featureUpdate the PyTorch library to version 2.7.1 #2863
featureBump bundled JDK to Java 26.0.1 #147424
featureAdd logging tracking to _xpack/usage #148087
featureUpdate elastic-apm-agent-java8 to 1.55.6 #148271
fixAggs: Account aggs uncompressed size on coordinator reduction #148885 (issue: #147190)
fixAggs: Fix auto_date_histogram/date_histogram inside a global agg #147427 (issue: #92570)
fixFix ArrayIndexOutOfBoundsException in date_histogram with hard_bounds outside data #148765 (issue: #148763)
fixFix CCR follow to handle indexing_complete race #145304
fixUpdate failure store redirect logic to exclude backpressure exceptions #148154
fixFix FsBlobContainer.moveBlobAtomic fallback on CIFS filesystems #148777 (issue: #148811)
fixFix race in FsBlobContainer.moveBlobAtomic by replacing move op with hard link #147405 (issue: #147171)
fixFix management of PIT close failures after successful query #146634 (issues: #146263, #146187)
fixDisallow empty lists in named params, only #147748 (issue: #147448)
fixDo not enable doc-partitioning for count #143544 (issue: #134512)
fixFix ArrayIndexOutOfBoundsException in centroid grouping evaluateFinal #148815 (issue: #141318)
fixFix FROM *_logs index name validation #149395 (issue: #146073)
fixFix _index LIKE with ? wildcard #147462 (issue: #146364)
fixFix deriv aggregation function intermediate state #146160 (issue: #141305)
fixFix errors in blockloaders when filtering nulls on histograms #148983 (issue: #147854)
fixFix nullify under join and enrich #145743 (issue: #141827)
fixNode-reduce driver should not release search contexts on failure #145960 (issue: #145509)
fixNormalize _timeseries to JSON for stored source #148716 (issue: #148414)
fixReport correct location for SET errors #147582 (issue: #145873)
fixRestore TEXT field size estimate for Enrich and LookupJoin #147357
fixUse search threadpool for coordination in ES|QL #149034
fixHonor task settings for Amazon Bedrock and Google Vertex chat completion #149268 (issue: #148792)
fixImplement RerankingInferenceService for Elastic service #148365
fixMake similarity required for SageMaker ElasticTextEmbeddingPayload #146885
fix[Inference API] Fix inference initialization thread exhaustion #147063
fix[Inference API] Fixing potential NPE if InferenceContext is null #148921
fix[Inference API] Use image/jpeg instead of image/jpg for inference validation MIME type #148793
fixFix potential OOME on SearchResponse#toString() for extemely large responses #147267
fixUse toTruncatedString in chunked objects toString #147860 (issue: #143694)
fixPreserve zero-allocation trained-model deployments in cluster state during ML-node shutdown rebalances #146910 (issue: #146806)
fixFix REPLACE with empty pattern #148616
+13 more items in the release notessecurityFixes CVE-2026-63136: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search…
featureBump heap usage limits for INLINE STATS #144679
featureSkip time series field type merge for non-TS agg queries #143262
featureUpdate bundled JDK to Java 26 #146167
fixFix propagation of filters on join keys for missing events #145813 (issue: #145402)
fixDo not discard disjunction conditions when is null/is not null might invalidate them #145941
fixDon't use a Literal for constant_keyword fields when used inside full-text functions #145632 (issue: #145570)
fixESQL - Fix performance loading source when vectors are excluded #146223 (issue: #145799)
fixFix handling of values on the time bucket boundaries for ES|QL increase #145794
fixFix nested fields loading under NULLIFY #145741 (issue: #142616)
fixFix rate/increase single-value bucket handling for delta temporality #146518
fixFix starts_with/ends_with with special chars #146348 (issue: #130851)
fixKeywords mv count fix #145390
fixThrow a 400 error for malformed parsing input when missing element end #145777
fixFix pipeline resolution cache for bulk requests #144648
fixFix waiting for enrich policy execution for users without the monitor privilege #145751
fixOmit uncomputed model stats #146186
fixFix match only text decoding surrogate pairs #146567 (issue: #146538)
fixRestore initial thread context during reindex etc #146134
fixAdd cancellation support to IndicesRequestCache #141708
fixCollapse pathological regex quantifier stacking to prevent NFA construction OOM #145452
fixFix terminate_after not honored for aggs when size=0 #146199 (issue: #126665)
fixFix bug parsing "request" parameter in clear cache API, it should clear the request cache only #145726
fixUse query circuit breaker for wildcard/regexp determinization #145427 (issue: #145128)
fixUse IllegalArgumentException over RepositoryException for readonly-repository checks #140200
fixReplace IllegalStateException with IllegalArgumentException for conflicting time series metadata #142370
fixFix NPE in GPU resource pool when CuVSResources creation fails #146632
fixFix NPE when having double nested field with knn query #146933 (issue: #141830)
fix[DiskBBQ] Fix offHeap size for empty indices #146347
fix[DiskBBQ] Wait for queue saturation in MaxScoreTopKnnCollector #145341
featureSkip automaton construction for literal resource strings in application privilege checks #144685
fixFix ArrayIndexOutOfBoundsException in cat nodes for partial load average arrays #144859
fixCCR follower index needs to copy transport version from CCR leader index #145035
fixCancel async query on expiry #143016 (issue: #142662)
fixDon't over-alloc when unpacking dimension values #144525
fixESQL: Fix incorrectly optimized fork with nullify unmapped_fields #143030 (issue: #142762)
fixESQL: Fix null comparison type checking #140660 (issue: #140460)
fixFix field caps incorrectly synthesizing object parents under subobjects:false passthrough mappers #144183 (issue: #144179)
fixReduce LuceneOperator.Status memory consumption with large QueryDSL queries #143175 (issue: #143164)
fixFix createLDAPCertStore failing in FIPS mode #144453 (issues: #144376, #144377)
fixFix geo_centroid over geo_shape merging multiple shards #144637 (issue: #144504)
fixFix system index mapping update for reindexed indices after migration #144782 (issue: #144764)
fixFix "reset anomaly detection API" crashing when only colliding indices exist #144545 (issue: #144544)
fixLazily create matcher in BinaryDvConfirmedQuery #144698
fixFix ArrayIndexOutOfBoundsException in fetch phase with partial results #144385 (issue: #140495)
fixFix circuit breaker leak in percolator query construction #144827
fixFix request cache invalidation to use ES cache helper consistently #144581
fixFix wrong return value in ContextIndexSearcher.totalTermFreq #144333
fixFix up exception messages in AzureBlobStore #144654
fixFix dense_vector default index options when using BFLOAT16 #145202 (issue: #145204)
fix[DiskBBQ] Fix index sorting on flush #144938
fix[DiskBBQ] Fix index sorting on flush (2nd attempt) #145076