We are currently running Elasticsearch version 8.19.8 in our environment and are receiving a Log4j vulnerability alert. To address this issue, we verified and upgraded to Elasticsearch version 8.19.11, but the vulnerability is still being flagged. Could you please provide the solution or confirm t…

Elasticsearch Log4j vulnerability resolution for 8.19.X version

Christian_Dahlqvist (Christian Dahlqvist) February 20, 2026, 5:58pm 9

Have you seen that there exists a search function for the forum? If I type in the CVE designation you provided I immediately find the following thread:

1 Like

Topic		Replies	Views
Log4j CVE-2021-44832 (released 28th dec) - is ES vulnerable? Elasticsearch	10	6836	February 7, 2022
Vulnerability Apache Tika 1.13 < 3.2.2 XXE (CVE-2025-66516) and Apache Log4j 2.0-beta9 < 2.25.3 MitM in VA scan report of server Elasticsearch elastic-stack-security	1	101	February 9, 2026
Bitbucket and Elastic security question! Elasticsearch	4	1100	March 11, 2022
Is Elasticsearch affected by CVE-2021-45046 - a second vulnerability in log4j? Elasticsearch	2	6030	January 12, 2022
Lucene vulnerability in elastic search Elasticsearch	2	149	November 14, 2024

Elasticsearch Log4j vulnerability resolution for 8.19.X version

Related topics