What is CVE-2026-56748?
CVE-2026-56748 is a vulnerability in Cribl Stream's Pack Git import feature due to improper validation of symbolic links. This allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository. Upgrading to Cribl Stream version 4.18.2 is recommended.
Azərbaycanca: CVE-2026-56748, Cribl Stream-in Pack Git idxal funksiyasında simvolik keçidlərin düzgün yoxlanılmaması səbəbindən yaranmış boşluqdur. Bu, uzaqdan autentifikasiya olunmuş və Pack idxalı ilə pipeline ön baxış icazələrinə malik təcavüzkarın xüsusi hazırlanmış Git repo vasitəsilə Cribl server prosesi olaraq ixtiyari kod icra etməsinə imkan verir. Cribl Stream 4.18.2 versiyasına yüksəltmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-22
FAQ2
What permissions does an attacker need to exploit CVE-2026-56748?
The attacker must be remotely authenticated with Pack import and pipeline preview permissions.
What is the recommended solution for CVE-2026-56748?
Upgrading to Cribl Stream version 4.18.2 is recommended.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.