CVE-2025-68383: Elastic Filebeat

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Dissect processor can allow a user to trigger a Buffer Overflow (CAPEC-100) and cause a denial of service (panic/crash) of the Filebeat process via either a malformed Syslog message or a malicious tokenizer pattern in the Dissect configuration.

Affected products

• Elastic Filebeat: from 7.0.0, up to and including 7.17.29; from 8.0.0, before 8.19.9 (fixed in 8.19.9); from 9.0.0, before 9.1.9 (fixed in 9.1.9); from 9.2.0, before 9.2.3 (fixed in 9.2.3)

Published 2025-12-18. Last modified 2026-06-17.