Is Logstash 9.2.6 affected?
Feb 26, 2026 · Release notes ↗
1 known vulnerability affects 9.2.6 (highest CVSS 8.1).
Your branch 9.2 has reached end of life (May 5, 2026).
26 newer releases in its track, up to 9.5.5. What changed up to 9.5.5
Vulnerabilities affecting 9.2.6
- 8.1 CVE-2026-33466 Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal (CAPEC-139). The… fixed in 9.2.8
Newer releases
| 9.5.5 | Oct 6, 2026 | 9.2.6 → 9.5.5 |
| 9.5.4 | Sep 15, 2026 | 9.2.6 → 9.5.4 |
| 9.5.3 | Sep 3, 2026 | 9.2.6 → 9.5.3 |
| 9.5.2 | Aug 20, 2026 | 9.2.6 → 9.5.2 |
| 9.5.1 | Aug 11, 2026 | 9.2.6 → 9.5.1 |
| 9.5.0 | Aug 4, 2026 | 9.2.6 → 9.5.0 |
| 9.4.8 | Oct 6, 2026 | 9.2.6 → 9.4.8 |
| 9.4.7 | Sep 15, 2026 | 9.2.6 → 9.4.7 |
| 9.4.6 | Sep 1, 2026 | 9.2.6 → 9.4.6 |
| 9.4.5 | Aug 11, 2026 | 9.2.6 → 9.4.5 |
| 9.4.4 | Jul 21, 2026 | 9.2.6 → 9.4.4 |
| 9.4.3 | Jun 30, 2026 | 9.2.6 → 9.4.3 |
| 9.4.2 | May 28, 2026 | 9.2.6 → 9.4.2 |
| 9.4.1 | May 12, 2026 | 9.2.6 → 9.4.1 |
| 9.4.0 | May 5, 2026 | 9.2.6 → 9.4.0 |