# CVE-2025-58057 Netty Security Issue

**URL:** <https://discuss.elastic.co/t/cve-2025-58057-netty-security-issue/381815>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security, docker\
**Created:** [September 10, 2025, 12:26am UTC](https://discuss.elastic.co/t/cve-2025-58057-netty-security-issue/381815 "2025-09-10T00:26:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sfarooqui](https://avatars.discourse-cdn.com/v4/letter/s/58956e/32.png) [@sfarooqui](https://discuss.elastic.co/u/sfarooqui)\
**Post date:** [September 10, 2025, 12:26am UTC](https://discuss.elastic.co/t/cve-2025-58057-netty-security-issue/381815/1 "2025-09-10T00:26:22Z")

</div>

Hello! I hope you are well. My team recently ran AWS ECR Inspector on our elasticsearch docker image and Inspector stated our image contains this vulnerability: CVE-2025-58057 (can’t link to the host, but it is an issue with Netty). I tried searching the forums and can’t find anything about this. It states that netty has to be updated to mitigate the issue. Is there any guidance from elasticsearch on this? Please inform me if it would instead be preferred for me to contact anyone else about this. Thank you!

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [September 10, 2025, 7:01am UTC](https://discuss.elastic.co/t/cve-2025-58057-netty-security-issue/381815/2 "2025-09-10T07:01:21Z")

</div>

Which version of Elasticsearch are you using? If this is not the latest one, have you checked whether the issue still persists in the latest version?

Also note that security issues are not discussed publicly in these forums.Please look [here for further details](https://www.elastic.co/community/security) and a way to contact Elastic directly around this issue.

---

<div class="post-metadata">

**Author:** ![sfarooqui](https://avatars.discourse-cdn.com/v4/letter/s/58956e/32.png) [@sfarooqui](https://discuss.elastic.co/u/sfarooqui)\
**Post date:** [September 15, 2025, 8:14pm UTC](https://discuss.elastic.co/t/cve-2025-58057-netty-security-issue/381815/3 "2025-09-15T20:14:16Z")

</div>

Thanks for linking this! I will send an email. It is on version 9.1.3, the latest on the official docker image.