CVE-2026-33466 - Vulnerability Analysis

Overview

Logstash contains a path traversal caused by improper validation of file paths in compressed archives, letting attackers write arbitrary files and potentially execute code remotely via crafted archives, exploit requires attacker-controlled update endpoint.

Severity & Score

Impact

Attackers can write arbitrary files and potentially execute code remotely, leading to full system compromise.

Mitigation

Update to the latest version of Logstash with fixed archive extraction validation.

References

• https://discuss.elastic.co/t/logstash-8-19-14-9-2-8-9-3-3-security-update-esa-2026-29/385816

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner