Beats vulnerabilities

2 known vulnerabilities in Beats from Elastic. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Beats: Uncontrolled Search Path Element

  CVE-2025-25011Jul 30, 2025Elastic

  An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to

• 7.5 High severity

  Beats: Improper Certificate Validation

  CVE-2023-31421Oct 26, 2023Elastic

  It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however, certificate signature validation is still performed. More specifica