CVE-2026-56747

HIGH

Code Injection in JSON Pointer Processing Component in Cribl Stream

Title source: cna

Description

Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value.

References (2)

Core 2

Core References

Release Notes release-notes

Cribl Stream 4.18.2 Security Fixes

https://docs.cribl.io/stream/release-notes/release-v4182/#security-fixes

Vendor Advisory vendor-advisory

Cribl Trust Portal

https://trust.cribl.io/notifications

Scores

CVSS v3 8.8

EPSS 0.0036

EPSS Percentile 29.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-94

Status published

Products (1)

Cribl/Cribl Stream < 4.18.2

Published Jul 27, 2026

Tracked Since Jul 28, 2026