CVE-2026-92789

Name of the Vulnerable Software and Affected Versions Graylog versions prior to 7.1.5

Description The software validates outbound URLs against an allowlist before making requests but fails to re-validate them after following HTTP redirects. Users with lookup table or event notification permissions can create allowlisted endpoints that redirect to internal services, allowing the server to fetch and return internal responses. This behavior enables a Server-Side Request Forgery (SSRF), where an attacker induces the server to make requests to an unintended location.

Recommendations Update to version 7.1.5 or later.