This vulnerability (CVE-2026-45391) affects Cribl Edge on Linux versions 3.2.0 through 4.17.0 and is classified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command). It allows a local user with limited privileges to perform OS command injection, thereby executing arbitrary commands under the Cribl Edge service account context. The CVSS 4.0 vector indicates local attack vector with low attack complexity, no user interaction required, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation allows a local unprivileged user to execute arbitrary OS commands with the privileges of the Cribl Edge service account. This can lead to unauthorized system control, data compromise, or service disruption. The high CVSS score (8.5) reflects significant potential impact on confidentiality, integrity, and availability of the affected system. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to Cribl Edge service execution. Avoid running Cribl Edge with elevated privileges if possible.