Unrated severityNVD Advisory· Published Jul 27, 2026· Updated Jul 27, 2026
Code Injection in JSON Pointer Processing Component in Cribl Stream
CVE-2026-56747
Description
Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value.
Affected products
1Patches
Vulnerability mechanics
References
2- trust.cribl.io/notificationsmitrevendor-advisory
- docs.cribl.io/stream/release-notes/release-v4182/mitrerelease-notes
News mentions
0No linked articles in our index yet.