Logpoint vulnerabilities
We track 9 vulnerabilities in Logpoint products across 3 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on November 28, 2025.
Latest Logpoint vulnerabilities
- 8.8 High severity
SIEM: Incorrect Authorization
An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.
- 8.4 High severity
Logpoint: Relative Path Traversal
An issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vulnerability when creating a Layout Template, which can lead to remote code execution (RCE).
- 7.1 High severity
Siem: Improper Neutralization of Special Elements used in a Command
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution.
- 7.1 High severity
Universal Normalizer: Improper Neutralization of Special Elements used in a Command
An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution.
- 7.5 High severity
logpoint: Missing Authentication for Critical Functionality
An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked proper authorization checks. This allowed unauthenticated users to register their own authentication plugins in Logpoint, r
- 7.5 High severity
logpoint: Server-Side Request Forgery
An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery (SSRF) on SOAR can be used to leak Logpoint's API Token leading to authentication bypass.
- 7.5 High severity
logpoint: Missing Authentication for Critical Functionality
An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF protections and authentication.
- 9.6 Critical severity
logpoint: Server-Side Request Forgery
An issue was discovered in Logpoint before 7.4.0. Due to a lack of input validation on URLs in threat intelligence, an attacker with low-level access to the system can trigger Server Side Request Forgery.
- 8.8 High severity
logpoint: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search template uses jinja templating for generating dynamic data. This could be abused to achieve code execution. Any user with access to create a search