Cribl vulnerabilities
We track 5 vulnerabilities in Cribl products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 27, 2026.
Latest Cribl vulnerabilities
- 8.8 High severity
Cribl Stream: UNIX Symbolic Link (Symlink) Following
Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git
- 8.8 High severity
Cribl Stream: Improper Control of Generation of Code
Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier
- 7.8 High severity
Cribl Edge: Improper Neutralization of Special Elements used in an OS Command
A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM. Incorrect default permissions on the Windows installer's authentication directory (CWE-276) expose a cryptographic se
- 8.7 High severity
Cribl Stream: Improper Neutralization of Input During Web Page Generation
DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated user who is tricked into visiting a crafted URL and interacting with the page.
- 7.8 High severity
Cribl Edge: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivileged user to execute arbitrary commands in the context of the Cribl Edge service account.