What is CVE-2026-78588?

CVE-2026-78588 is a medium-severity vulnerability in Elastic Filebeat, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 6.5/10. Published 2026-09-02.

How severe is CVE-2026-78588?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Resource exhaustion in Elastic Filebeat

CVE-2026-78588

Allocation of Resources Without Limits or Throttling (CWE-770) in Filebeat can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker able to reach the Filebeat HTTP ingestion endpoint could send specially crafted compressed requests that exhaust the memory resources of the Filebeat process.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Elastic Filebeat

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

security@elastic.co

Frequently asked questions

What is CVE-2026-78588?: CVE-2026-78588 is a medium-severity vulnerability in Elastic Filebeat, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 6.5/10. Published 2026-09-02.
How severe is CVE-2026-78588?: Medium severity. CVSS v3 base score is 6.5 out of 10.