CVE-2026-33466 – Elastic Logstash

CVSS 8.1 IMPORTANT

“When your data pipeline is exposed, attackers can turn ingestion into intrusion.”

This patch addresses a high-severity vulnerability in Elastic Logstash that could allow attackers to exploit weaknesses in data processing pipelines. As Logstash is widely used to ingest and transform data across systems, this issue introduces risk to environments where untrusted or external data sources are handled.

CVE-2026-33466 has a CVSS score of 8.1, which is High severity. This level of risk signals a strong potential for impact, particularly in centralized logging and data aggregation infrastructures where Logstash operates with elevated trust and access.

No verified exploitation or public proof-of-concept activity has been confirmed for this vulnerability.

Key Details

Affected Product
Elastic Logstash
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
CWE Classification
CWE-22
Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.