{"id":"CVE-2025-37727","details":"Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the  reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex","aliases":["BIT-elasticsearch-2025-37727","GHSA-56r7-h6mw-rcfv"],"modified":"2026-04-12T15:36:22.688692Z","published":"2025-10-10T10:15:34.167Z","related":["CGA-h8w8-8w97-33mx"],"references":[{"type":"ADVISORY","url":"https://discuss.elastic.co/t/elasticsearch-8-18-8-8-19-5-9-0-8-9-1-5-security-update-esa-2025-18/382453"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/elasticsearch","events":[{"introduced":"b7e28a7232616c7a21bc879a535d801b8553ba77"},{"last_affected":"580aff1a0064ce4c93293aaab6fcc55e22c10d1c"},{"introduced":"1b6a7ece17463df5ff54a3e1302d825889aa1161"},{"fixed":"c1310008a98b8bb63c9fc08e763de1d065b943ce"},{"introduced":"93788a8c2882eb5b606510680fac214cff1c7a22"},{"fixed":"d6dd0417f05cd69706f4f103c69bbb8b7688db9c"},{"introduced":"112859b85d50de2a7e63f73c8fc70b99eea24291"},{"fixed":"936f7cf370e0d7952bb71a98629284c3c0e0d00e"},{"introduced":"00e7d33bf08f1476229d9d1642e2da46cfebdd53"},{"fixed":"90ee222e7e0136dd8ddbb34015538f3a00c129b7"}],"database_specific":{"versions":[{"introduced":"7.0.0"},{"last_affected":"7.17.29"},{"introduced":"8.0.0"},{"fixed":"8.18.8"},{"introduced":"8.19.0"},{"fixed":"8.19.5"},{"introduced":"9.0.0"},{"fixed":"9.0.8"},{"introduced":"9.1.0"},{"fixed":"9.1.5"}]}}],"versions":["v8.19.0","v8.19.1","v8.19.2","v8.19.3","v8.19.4","v9.0.0","v9.0.1","v9.0.2","v9.0.3","v9.0.4","v9.0.5","v9.0.6","v9.0.7","v9.1.0","v9.1.1","v9.1.2","v9.1.3","v9.1.4"],"database_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-0294f1a7","source":"https://github.com/elastic/elasticsearch/commit/d6dd0417f05cd69706f4f103c69bbb8b7688db9c","deprecated":false,"target":{"function":"get","file":"test/test-clusters/src/main/java/org/elasticsearch/test/cluster/local/DefaultSettingsProvider.java"},"digest":{"function_hash":"269036682495508372098876363628838406213","length":2072}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-06bcb486","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"function":"testOldIndexSemanticTextSparseVersionRaisesError","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"249765765527764254961865193665008504870","length":322}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-0fe96721","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"function":"createEmbeddingsField","file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"function_hash":"150216485220854256111062364708144529577","length":1475}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-127380f2","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"function":"validateParserContext","file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"function_hash":"216429141669878661452070393933949020156","length":368}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-19cf7eab","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"function":"testOldIndexSemanticTextMinimalMappingRaisesError","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"331323253558194736856864026167107843654","length":126}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-19dbbb3d","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"threshold":0.9,"line_hashes":["46778459678719198788863574446553221226","227526389465720929596430553628975697304","150049059937223994787476705790433732044","328635304086144337324979246151558935664","238267326037809942089416424725201504926","239127309757472193571684981147742201173","173339703316009130346461748428871974340","320082339657603852603623259741426538034","57118101550255153288139441993827008978","268077932521070584832017352121249000075","102348567805617495592268951805669974975","11265192835822603210162801661360872060","201173388829126597956002296588814084345","337421580536504805651941451209477653214","268075823910593805973861160404908247282","9015906786740215991199765650853684422","266988922029788668281231447512727939898","172758342448755661431055717457301901038","297612526677102816987940982488909026806","210768804027509774644592109719262626729","298123093271431276257578624524763682529","80694905765248191373232040858301348148","51188739959210038594042089674024249861","187947718986999890631599988869822772770","207105469192108996997706200474270770510","151354268564102146974990964996402402639","127423006876670033087290001592727022679","275612146089253582203363595104868195677","51748493963961357519758086343479074559","200549291164040151494825744531332418306","239196964213531434344185265450366252390","329626261930251612650005244598332413438","120105507997745074262955751379832286552","34493630395322261406715696382503445314","16871879890049855732250965867318795550","114692002306916862615727736492928276000","215412353412547025196509663532932782715","335174381897296512391143356609878691466","290996714066872469541389277716815248935","333508862785924981954910392220880037432","277647464754561137415646796304470856322"]}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-2756f2da","source":"https://github.com/elastic/elasticsearch/commit/d6dd0417f05cd69706f4f103c69bbb8b7688db9c","deprecated":false,"target":{"file":"build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/InternalTestClustersPlugin.java"},"digest":{"threshold":0.9,"line_hashes":["201875432928091695612241281881754528179","292867734803984799864660937495456547324","196659888030505659736611847779352482664","137018670659402653545683123920040464986","292450941474251558568107696200354400924","215295917476798872971081433486924095541","42450885735602859671847586471405895440","235255254753786005465158034200498554465","169763964543134901506960684227268943609","338291239793442998840563304099775590734","261011217116242225010252450501658683247","137413462888448954392976100438474920537","203269082000244051504469967160022759693","291855855030839485975537059720214441018","221312210454151492562525019155621117165","278367177792591368759571815774146042088"]}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-281f6c6f","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"function":"parseSemanticTextField","file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"function_hash":"185620469528429678572919397230684044211","length":494}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-28ff1259","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"function":"indexMapping","file":"server/src/test/java/org/elasticsearch/index/mapper/vectors/DenseVectorFieldMapperTests.java"},"digest":{"function_hash":"282459297521231248024296681023376889457","length":1043}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-37d163d7","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"function":"testOldIndexSemanticTextDenseVectorRaisesError","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"255075628869125026499779058897594092053","length":474}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-4975358e","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"file":"server/src/test/java/org/elasticsearch/index/mapper/vectors/DenseVectorFieldMapperTests.java"},"digest":{"threshold":0.9,"line_hashes":["262236121079915436119142065679252180905","137777506514668796492329693710738707556","57564652145248143655886175705483546543","114140632291519758601195886058306622434","206061497615943989835368704148231563482","123974211637094905911105515844484307346","202035863791723906355035462524171464328","263579734941057405031723276015520724794"]}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-5412173f","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"function":"createEmbeddingsField","file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"function_hash":"151581543923528670693525823811555113136","length":1017}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-56865771","source":"https://github.com/elastic/elasticsearch/commit/936f7cf370e0d7952bb71a98629284c3c0e0d00e","deprecated":false,"target":{"function":"parseSemanticTextField","file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"function_hash":"185620469528429678572919397230684044211","length":494}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-59a95146","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"threshold":0.9,"line_hashes":["201659335253409180137227967538365490900","289297698807500789849272724987309848331","316947341018203027282186092977954478790","328635304086144337324979246151558935664","134985125497845462184671290574117510122","53436638292153261562403264825427102778","84758505728277541116106905481132339224","2483701144709191093784260606111001261","57118101550255153288139441993827008978","268077932521070584832017352121249000075","102348567805617495592268951805669974975","11265192835822603210162801661360872060","201173388829126597956002296588814084345","337421580536504805651941451209477653214","268075823910593805973861160404908247282","9015906786740215991199765650853684422","266988922029788668281231447512727939898","172758342448755661431055717457301901038","297612526677102816987940982488909026806","210768804027509774644592109719262626729","298123093271431276257578624524763682529","80694905765248191373232040858301348148","51188739959210038594042089674024249861","187947718986999890631599988869822772770","207105469192108996997706200474270770510","151354268564102146974990964996402402639","127423006876670033087290001592727022679","275612146089253582203363595104868195677","51748493963961357519758086343479074559","200549291164040151494825744531332418306","239196964213531434344185265450366252390","329626261930251612650005244598332413438","120105507997745074262955751379832286552","34493630395322261406715696382503445314","16871879890049855732250965867318795550","114692002306916862615727736492928276000","215412353412547025196509663532932782715","335174381897296512391143356609878691466","290996714066872469541389277716815248935","333508862785924981954910392220880037432","285581343859421270046665435499666487595"]}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-5a6e0e7d","source":"https://github.com/elastic/elasticsearch/commit/936f7cf370e0d7952bb71a98629284c3c0e0d00e","deprecated":false,"target":{"function":"testOldIndexSemanticTextDenseVectorRaisesError","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"255075628869125026499779058897594092053","length":474}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-5ad383b0","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"function":"testOldIndexSemanticTextDenseVectorRaisesError","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"255075628869125026499779058897594092053","length":474}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-5bb25224","source":"https://github.com/elastic/elasticsearch/commit/936f7cf370e0d7952bb71a98629284c3c0e0d00e","deprecated":false,"target":{"function":"testOldIndexSemanticTextMinimalMappingRaisesError","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"331323253558194736856864026167107843654","length":126}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-5dded118","source":"https://github.com/elastic/elasticsearch/commit/936f7cf370e0d7952bb71a98629284c3c0e0d00e","deprecated":false,"target":{"function":"boostNotAllowedIndexVersion","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"304099916769792469380869096030645339333","length":65}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-64cf6848","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"threshold":0.9,"line_hashes":["158605217801375928217441734668045540378","272643381640331013499760342031064134020","53985671753460806937762457046134928512","197421975884843474782424751932224498632","147776267001273472201702975582528497363","655409951843218362925480034532671518","17637815016842550146136423455960159478","74236008148083372658918307439668483975","322466091450047313375256476185595762444","19774709324117963877378806154921988126","111332465234007377841077556799200761214","318852455395922762541962253784569936542","103714126231198070777385075505723872779","225055423574406139145017039407710500808","176602979872018362860366352636239272391","331685485893499033920803751727008752008","69845433180568037910725362514896432747","288232291348711926876643238346416986777","68055421170270233796912105902769502524","94739273273727563438676562800551104982","84737812370821697998231739337299621986","115294157346707483202906366071384113569","57212282134168748289652182660041201662","254952007036070415382532317368308133681","263203763916969629460590396437502289108","22319423814347326997056951711072005097","23504183291184894397124342894633566955","218290195268039007322983453577677478937","104397057306458966946420455493521049587","108549254030958920501876829102082088797","103602840545713796434731913178477290736","288232291348711926876643238346416986777","304973740810181194951592487929339496300","130999337670170096176664372274476384929","35867540676817589760895459391085052904","207502979453752030282883390595778036424","201606209583253241599127378006426619079","196859472990790294633289504047629811096","217941806944909312076984301808225946554","262692938943554161674911701383004754029","122608929037810719115677381049195131198","266704451184192508078195140547635007709","42779409025487380885093343877669921094","113544207510783995041866812883656149640","300270315494799500913741421782448457144","186309500865517495853234544968794613882","275404729970474416383790431094378410325","52682000639465385863593790108573768318","108301057757930837241470507337700244957","8869584976956833588688363116094065733","320322203024487798382973062775163554140"]}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-65aab9a0","source":"https://github.com/elastic/elasticsearch/commit/d6dd0417f05cd69706f4f103c69bbb8b7688db9c","deprecated":false,"target":{"function":"createConfiguration","file":"build-tools/src/main/java/org/elasticsearch/gradle/testclusters/ElasticsearchNode.java"},"digest":{"function_hash":"189247659330120611255899761737295205590","length":3090}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-69fd1bb4","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"function":"boostNotAllowedIndexVersion","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"304099916769792469380869096030645339333","length":65}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-76e75111","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"function":"parseSemanticTextField","file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"function_hash":"185620469528429678572919397230684044211","length":494}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-77569fab","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"function":"testOldIndexSemanticTextMinimalMappingRaisesError","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"331323253558194736856864026167107843654","length":126}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-80b98c49","source":"https://github.com/elastic/elasticsearch/commit/d6dd0417f05cd69706f4f103c69bbb8b7688db9c","deprecated":false,"target":{"function":"apply","file":"build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/InternalTestClustersPlugin.java"},"digest":{"function_hash":"339286631303545539261800311528141578450","length":788}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-95e8a3ae","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"function":"boostNotAllowedIndexVersion","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"304099916769792469380869096030645339333","length":65}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-9f87301b","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"function":"testOldIndexSemanticTextSparseVersionRaisesError","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"249765765527764254961865193665008504870","length":322}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-a1880001","source":"https://github.com/elastic/elasticsearch/commit/936f7cf370e0d7952bb71a98629284c3c0e0d00e","deprecated":false,"target":{"function":"createEmbeddingsField","file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"function_hash":"151581543923528670693525823811555113136","length":1017}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-a400b225","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"threshold":0.9,"line_hashes":["138848391335496439760384072053788624649","272643381640331013499760342031064134020","53985671753460806937762457046134928512","197421975884843474782424751932224498632","147776267001273472201702975582528497363","655409951843218362925480034532671518","17637815016842550146136423455960159478","74236008148083372658918307439668483975","322466091450047313375256476185595762444","19774709324117963877378806154921988126","111332465234007377841077556799200761214","318852455395922762541962253784569936542","103714126231198070777385075505723872779","225055423574406139145017039407710500808","176602979872018362860366352636239272391","331685485893499033920803751727008752008","69845433180568037910725362514896432747","288232291348711926876643238346416986777","68055421170270233796912105902769502524","94739273273727563438676562800551104982","84737812370821697998231739337299621986","115294157346707483202906366071384113569","57212282134168748289652182660041201662","254952007036070415382532317368308133681","263203763916969629460590396437502289108","22319423814347326997056951711072005097","23504183291184894397124342894633566955","218290195268039007322983453577677478937","104397057306458966946420455493521049587","108549254030958920501876829102082088797","103602840545713796434731913178477290736","288232291348711926876643238346416986777","304973740810181194951592487929339496300","130999337670170096176664372274476384929","35867540676817589760895459391085052904","207502979453752030282883390595778036424","201606209583253241599127378006426619079","196859472990790294633289504047629811096","217941806944909312076984301808225946554","262692938943554161674911701383004754029","122608929037810719115677381049195131198","266704451184192508078195140547635007709","42779409025487380885093343877669921094","113544207510783995041866812883656149640","300270315494799500913741421782448457144","186309500865517495853234544968794613882","275404729970474416383790431094378410325","52682000639465385863593790108573768318","108301057757930837241470507337700244957","8869584976956833588688363116094065733","320322203024487798382973062775163554140"]}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-aaca87f1","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"file":"server/src/test/java/org/elasticsearch/index/mapper/vectors/DenseVectorFieldMapperTests.java"},"digest":{"threshold":0.9,"line_hashes":["181320571600198418982009240539939798543","169287320765032099154665842823281563426","206141912844909897609368796238279101654","79522924381762417070909548166485907047","206061497615943989835368704148231563482","123974211637094905911105515844484307346","202035863791723906355035462524171464328","180092483531318306332375103048816107448"]}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-bac55aa9","source":"https://github.com/elastic/elasticsearch/commit/c1310008a98b8bb63c9fc08e763de1d065b943ce","deprecated":false,"target":{"function":"assertOldIndexUnsupported","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"192095868591587962532804350088891814436","length":331}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-bc497222","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"function":"validateParserContext","file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"function_hash":"216429141669878661452070393933949020156","length":368}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-c68f6650","source":"https://github.com/elastic/elasticsearch/commit/d6dd0417f05cd69706f4f103c69bbb8b7688db9c","deprecated":false,"target":{"file":"test/test-clusters/src/main/java/org/elasticsearch/test/cluster/local/DefaultSettingsProvider.java"},"digest":{"threshold":0.9,"line_hashes":["145152996910083025882365213578824959031","2676960805448399036476663589235584911","262554611364329333534925155494228851048","109827329768022785387218720610747300115"]}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-d26afbef","source":"https://github.com/elastic/elasticsearch/commit/936f7cf370e0d7952bb71a98629284c3c0e0d00e","deprecated":false,"target":{"function":"assertOldIndexUnsupported","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"192095868591587962532804350088891814436","length":331}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-db7ba1a9","source":"https://github.com/elastic/elasticsearch/commit/d6dd0417f05cd69706f4f103c69bbb8b7688db9c","deprecated":false,"target":{"file":"build-tools/src/main/java/org/elasticsearch/gradle/testclusters/ElasticsearchNode.java"},"digest":{"threshold":0.9,"line_hashes":["145160648915801089826981904625537909257","42983940649290099585203735755069991189","259042419839513735390215506938370160568","53523156721841588313300745469212558097","7034715473439696607992318865238676731"]}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-e273a1bd","source":"https://github.com/elastic/elasticsearch/commit/936f7cf370e0d7952bb71a98629284c3c0e0d00e","deprecated":false,"target":{"file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"threshold":0.9,"line_hashes":["158605217801375928217441734668045540378","272643381640331013499760342031064134020","53985671753460806937762457046134928512","197421975884843474782424751932224498632","147776267001273472201702975582528497363","655409951843218362925480034532671518","17637815016842550146136423455960159478","74236008148083372658918307439668483975","322466091450047313375256476185595762444","19774709324117963877378806154921988126","111332465234007377841077556799200761214","318852455395922762541962253784569936542","103714126231198070777385075505723872779","225055423574406139145017039407710500808","176602979872018362860366352636239272391","331685485893499033920803751727008752008","69845433180568037910725362514896432747","288232291348711926876643238346416986777","68055421170270233796912105902769502524","94739273273727563438676562800551104982","84737812370821697998231739337299621986","115294157346707483202906366071384113569","57212282134168748289652182660041201662","254952007036070415382532317368308133681","263203763916969629460590396437502289108","22319423814347326997056951711072005097","23504183291184894397124342894633566955","218290195268039007322983453577677478937","104397057306458966946420455493521049587","108549254030958920501876829102082088797","103602840545713796434731913178477290736","288232291348711926876643238346416986777","304973740810181194951592487929339496300","130999337670170096176664372274476384929","35867540676817589760895459391085052904","207502979453752030282883390595778036424","201606209583253241599127378006426619079","196859472990790294633289504047629811096","217941806944909312076984301808225946554","262692938943554161674911701383004754029","122608929037810719115677381049195131198","266704451184192508078195140547635007709","42779409025487380885093343877669921094","113544207510783995041866812883656149640","300270315494799500913741421782448457144","186309500865517495853234544968794613882","275404729970474416383790431094378410325","52682000639465385863593790108573768318","108301057757930837241470507337700244957","8869584976956833588688363116094065733","320322203024487798382973062775163554140"]}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-ed1c2bf3","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"function":"indexMapping","file":"server/src/test/java/org/elasticsearch/index/mapper/vectors/DenseVectorFieldMapperTests.java"},"digest":{"function_hash":"37651411927726833078118660564704242750","length":1559}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-f11fdf3e","source":"https://github.com/elastic/elasticsearch/commit/936f7cf370e0d7952bb71a98629284c3c0e0d00e","deprecated":false,"target":{"function":"testOldIndexSemanticTextSparseVersionRaisesError","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"249765765527764254961865193665008504870","length":322}},{"signature_type":"Line","signature_version":"v1","id":"CVE-2025-37727-f599795d","source":"https://github.com/elastic/elasticsearch/commit/936f7cf370e0d7952bb71a98629284c3c0e0d00e","deprecated":false,"target":{"file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"threshold":0.9,"line_hashes":["201659335253409180137227967538365490900","289297698807500789849272724987309848331","316947341018203027282186092977954478790","328635304086144337324979246151558935664","238267326037809942089416424725201504926","239127309757472193571684981147742201173","173339703316009130346461748428871974340","320082339657603852603623259741426538034","57118101550255153288139441993827008978","268077932521070584832017352121249000075","102348567805617495592268951805669974975","11265192835822603210162801661360872060","201173388829126597956002296588814084345","337421580536504805651941451209477653214","268075823910593805973861160404908247282","9015906786740215991199765650853684422","266988922029788668281231447512727939898","172758342448755661431055717457301901038","297612526677102816987940982488909026806","210768804027509774644592109719262626729","298123093271431276257578624524763682529","80694905765248191373232040858301348148","51188739959210038594042089674024249861","187947718986999890631599988869822772770","207105469192108996997706200474270770510","151354268564102146974990964996402402639","127423006876670033087290001592727022679","275612146089253582203363595104868195677","51748493963961357519758086343479074559","200549291164040151494825744531332418306","239196964213531434344185265450366252390","329626261930251612650005244598332413438","120105507997745074262955751379832286552","34493630395322261406715696382503445314","16871879890049855732250965867318795550","114692002306916862615727736492928276000","215412353412547025196509663532932782715","335174381897296512391143356609878691466","290996714066872469541389277716815248935","333508862785924981954910392220880037432","277647464754561137415646796304470856322"]}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-f79eb048","source":"https://github.com/elastic/elasticsearch/commit/90ee222e7e0136dd8ddbb34015538f3a00c129b7","deprecated":false,"target":{"function":"assertOldIndexUnsupported","file":"x-pack/plugin/inference/src/test/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapperTests.java"},"digest":{"function_hash":"192095868591587962532804350088891814436","length":331}},{"signature_type":"Function","signature_version":"v1","id":"CVE-2025-37727-ff78991f","source":"https://github.com/elastic/elasticsearch/commit/936f7cf370e0d7952bb71a98629284c3c0e0d00e","deprecated":false,"target":{"function":"validateParserContext","file":"x-pack/plugin/inference/src/main/java/org/elasticsearch/xpack/inference/mapper/SemanticTextFieldMapper.java"},"digest":{"function_hash":"216429141669878661452070393933949020156","length":368}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37727.json","vanir_signatures_modified":"2026-04-12T15:36:22Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}