CVE-2026-78588: Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of Service
Allocation of Resources Without Limits or Throttling (CWE-770) in Filebeat can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker able to reach the Filebeat HTTP ingestion endpoint could send specially crafted compressed requests that exhaust the memory resources of the Filebeat process.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this denial-of-service issue?
Deployments are exposed if an attacker can reach the Filebeat HTTP ingestion endpoint. The issue affects the Filebeat process by allowing its memory resources to be exhausted.
What access does an attacker need to exploit the issue?
The attacker needs network reachability to the Filebeat HTTP ingestion endpoint. No user interaction is required, but the supplied vector indicates low privileges are required.
What is the practical impact of successful exploitation?
Specially crafted compressed requests can cause excessive memory allocation in Filebeat. This can exhaust memory resources and deny service from the Filebeat process.