Improper Certificate Validation in Logstash by Elastic

CVE-2025-37730

What is CVE-2025-37730?

A vulnerability in Logstash's TCP output configuration allows attackers to execute man-in-the-middle (MitM) attacks due to inadequate hostname verification. When the 'ssl_verification_mode' is set to 'full', the absence of proper certificate validation can expose sensitive data as it traverses the network. This issue affects multiple versions of Logstash, making it critical for users to update to secure their deployments against potential exploitation.

References