Unauthorized Access in Graylog Log Management Platform
CVE-2026-69190
6.3MEDIUM
What is CVE-2026-69190?
In the Graylog log management platform, a vulnerability presents itself in the view update API for saved searches and dashboards. Users with edit permissions, lacking ownership of the entity, can submit a shareRequest that inadvertently elevates an arbitrary account to owner status. This unauthorized elevation allows the selected user to delete saved searches or dashboards and revoke access from the original owners. It's essential for administrators using Graylog versions from 6.3.0 to 7.1.4 to ensure they update to the latest versions to mitigate this risk.
Affected Version(s)
graylog2-server >= 6.3.0, < 6.3.14 < 6.3.0, 6.3.14
graylog2-server >= 7.0.0, < 7.0.9 < 7.0.0, 7.0.9
graylog2-server >= 7.1.0, < 7.1.4 < 7.1.0, 7.1.4