Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-45391

Local privilege escalation in Cribl Edge for Linux

Description

A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivileged user to execute arbitrary commands in the context of the Cribl Edge service account.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cribl Cribl Edge

Default version status: unaffected

  • 3.2.0 to < 4.17.1affected
  • 4.17.1unaffected

References