CVE-2026-55425: CWE-213: Exposure of Sensitive Information Due to Incompatible Policies in Graylog2 graylog2-server
Description
A vulnerability in Graylog2-server versions from 7.1.0 up to but not including 7.1.4 and 7.2.0-alpha.2 allows authenticated users to access composite display fields without proper permission checks. This can expose sensitive information such as password hashes. Ordinary users can access their own permitted records, while administrators can access hashes for all users. The issue is resolved in versions 7.1.4 and 7.2.0-alpha.2.
CVSS v3.1
Score 5.0medium
Affected software
Graylog2
graylog2-server
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Graylog2-server contains an information exposure vulnerability (CWE-213) in the System Catalog entity titles endpoint. From versions 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the endpoint allows authenticated users to request composite display fields without verifying that each selected field is readable by the user. This flaw permits retrieval of protected values, including password hashes. The vulnerability is fixed in versions 7.1.4 and 7.2.0-alpha.2.
Potential Impact
Authenticated users can retrieve sensitive information such as password hashes from the system catalog entity titles endpoint. Ordinary users are limited to their own records, but administrators can access hashes for all users. This exposure could lead to credential compromise if hashes are cracked. There is no indication of impact on integrity or availability.
Mitigation Recommendations
Upgrade graylog2-server to version 7.1.4 or later, or to 7.2.0-alpha.2 or later, where this issue is fixed. No other mitigation or workaround is indicated in the available data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-16T21:48:43.126Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a91e40cacd9273b4942e82f
Added to database: 08/28/2026, 19:39:56 UTC
Last enriched: 09/07/2026, 15:23:02 UTC
Last updated: 10/13/2026, 18:48:21 UTC
Views: 39
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.