CVE-2023-31413

Elastic Filebeat versions through 7.17.9 and 8.6.2 contain a flaw in the httpjson input that can lead to sensitive information disclosure. When debug logging is enabled, the contents of the Authorization or Proxy-Authorization headers from HTTP requests may be leaked into the logs. This vulnerabi...

CVE-2025-68383

CVE-2025-68383 affects Filebeat Syslog parser and the Libbeat Dissect processor. A malformed Syslog message or a malicious tokenizer pattern in the Dissect configuration can trigger a Buffer Overflow (CAPEC-100) and cause a denial of service (panic/crash) of the Filebeat process. Exploitation det...

CVE-2026-78588

Filebeat (Elastic) is affected by an uncontrolled resource allocation vulnerability (CWE-770) in its HTTP ingestion endpoint . An attacker with network access to this endpoint can send specially crafted compressed requests that exhaust the memory of the Filebeat process, causing a denial of servi...