CVE-2026-45393: Cribl Edge, инжекция

Описание

Оригинално описание

A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM. Incorrect default permissions on the Windows installer's authentication directory (CWE-276) expose a cryptographic secret used for JWT signing and password-hash derivation, enabling forgery of administrative API tokens. The forged token can then be used to invoke a pipeline function that reaches an OS command sink (CWE-78) running in the SYSTEM context.

Засегнати продукти

• Cribl Cribl Edge: преди 4.17.1

Вид слабост

• CWE-276 Неправилни права по подразбиране
• CWE-78 Инжектиране на команди към операционната система
• CWE-20 Неправилно валидиране на входните данни

История

Други уязвимости в Cribl Cribl Edge

• 9.8CVE-2026-45391

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-45393
• https://nvd.nist.gov/vuln/detail/CVE-2026-45393
• https://docs.cribl.io/edge/release-notes/release-v4171#security-fixes
• https://trust.cribl.io/notifications