CVE-2026-45391 HIGH

CVE-2026-45391: Local privilege escalation in Cribl Edge for Linux

Vendor Cribl

Product Cribl Edge

Weakness CWE-78

Published May 12, 2026

Last update June 2, 2026

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivileged user to execute arbitrary commands in the context of the Cribl Edge service account.

Key dates

02Disclosure timeline

May 12, 2026 CVE published

June 2, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-45391 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/78.html

Related vulnerabilities

04Related CVE

CVE-2023-6895 Hikvision Intercom Broadcasting System ping.php os command injection CVE-2024-2162 Authenticated Remote Code Execution in Kiloview NDI N series products CVE-2026-9367 NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection CVE-2025-3881 eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability CVE-2023-48782