CVE-2026-56748

HIGH SEVERITY

CVSS Score & Metrics

Base Score

8.8 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link in the pack's functions directory.

Vulnerability Details

Published Date

July 27, 2026

Last Modified

July 27, 2026

CWE ID

CWE-61

Source

NVD

Vendor

Cribl

Product

Cribl Stream

External References

https://docs.cribl.io/stream/release-notes/release-v4182/#security-fixes
https://trust.cribl.io/notifications

CVE-2026-56748

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment