Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal (CAPEC-139). The archive extraction utilities used by Logstash do not properly validate file paths within compressed archives. An attacker who can serve a specially crafted archive to Logstash through a compromised or attacker-controlled update endpoint can write arbitrary files to the host filesystem with the privileges of the Logstash process. In certain configurations where automatic pipeline reloading is enabled, this can be escalated to remote code execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-08 | 1 | Disclosure1 |
| 2026-04-10 | 1 | Patch1 |
| 2026-04-11 | 1 | Disclosure1 |
| 2026-04-13 | 1 | General1 |
⚠️ Vulnerabilidades en productos Elastic ❗ CVE-2026-4498 ❗ CVE-2026-33466 ❗ CVE-2026-33461 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-elastic-2/ https://t.co/9mpmyikW4w
Post summary
The post lists three Elastic product CVEs and points to an external link for more detail, but provides no specific vulnerability data, exploit, or remediation information.
I'm the original reporter of the Logstash CVE-2026-33466 bug. 😎 https://discuss.elastic.co/t/logstash-8-19-14-9-2-8-9-3-3-security-update-esa-2026-29/385816
Post summary
The user declares themselves as the original reporter of Logstash CVE‑2026‑33466, but provides no further technical details or evidence of exploitation.
『In certain configurations where automatic pipeline reloading is enabled, this can be escalated to remote code execution.』 CVE-2026-33466 Logstash 8.19.14, 9.2.8, 9.3.3 Security Update (ESA-2026-29) https://discuss.elastic.co/t/logstash-8-19-14-9-2-8-9-3-3-security-update-esa-2026-29/385816
Post summary
CVE-2026-33466 in Logstash can lead to remote code execution in specific configurations, and a security update (ESA-2026-29) addresses the issue.
CVE-2026-33466 Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative P… https://www.cve.org/CVERecord?id=CVE-2026-33466
Post summary
The CVE record outlines a pathname traversal flaw in Logstash that could enable arbitrary file writes and remote code execution, but no PoC, exploit, or patch information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | elastic | logstash | - | - | - |