Is Logstash 9.2.4 affected?

CVSS 8.1

1 known vulnerability affects 9.2.4 (highest CVSS 8.1).

Your branch 9.2 has reached end of life (May 5, 2026).

28 newer releases in its track, up to 9.5.5. What changed up to 9.5.5

Vulnerabilities affecting 9.2.4

8.1
CVE-2026-33466 Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal (CAPEC-139). The… fixed in 9.2.8