What’s Vulnerable › Products

Elastic Logstash vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Elastic Logstash version is affected

Latest Elastic Logstash vulnerabilities

• CVE-2026-33466 — Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write (CVSS 9.8)
• CVE-2025-37730 — Logstash Improper Certificate Validation in TCP output (CVSS 6.5)
• CVE-2023-46672 — Logstash Insertion of Sensitive Information into Log File (CVSS 5.5)
• CVE-2021-22138 — (CVSS 3.7)
• CVE-2019-7620 — (CVSS 7.5)
• CVE-2019-7612 — (CVSS 9.8)
• CVE-2018-3817 — (CVSS 6.5)
• CVE-2015-5619 — (CVSS 5.9)
• CVE-2015-5378 — (CVSS 7.5)
• CVE-2016-10363 — (CVSS 7.5)
• CVE-2016-1000222 — (CVSS 7.5)
• CVE-2016-1000221 — (CVSS 7.5)
• CVE-2015-4152 — (CVSS 6.4)
• CVE-2014-4326 — (CVSS 7.5)