Skip to content
OpenAdvisories
Medium WID-SEC-2026-3488 1 CVE

Graylog: Schwachstelle ermöglicht Privilegieneskalation

Published Sep 21, 2026 · Updated Sep 21, 2026 · de-DE

Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Graylog ausnutzen, um seine Privilegien zu erhöhen.

Product

GrayLog open source ist eine Log-Management-Lösung.

Vulnerabilities 1

  • Medium 6.3
    CVE-2026-69190

    Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

    Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner p…

    Graylog2 graylog2-server org.graylog2:graylog2-server Maven

Revision history

  1. #1

    Initiale Fassung

References