PT-2026-34018 · Crowdstrike · Logscale

Published 2026-04-21 · Updated 2026-04-22 · CVE-2026-40050

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LogScale (affected versions not specified)

Description An unauthenticated path traversal issue exists in a specific cluster API endpoint. If this endpoint is exposed, a remote attacker can read arbitrary files from the server filesystem without authentication. This issue affects self-hosted deployments and does not impact Next-Gen SIEM customers.

Recommendations Upgrade to a patched version immediately.

Fix

Path traversal

Missing Authentication

Weakness Enumeration

CWE-22

CWE-306

Related Identifiers

CVE-2026-40050

Affected Products

Logscale

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-40050 · Security Note
• https://twitter.com/RedHornet_Intel/status/2046646664207970723 · Twitter Post
• https://twitter.com/The_Cyber_News/status/2046888407868305415 · Twitter Post
• https://twitter.com/UndercodeUpdate/status/2046894399636779056 · Twitter Post
• https://twitter.com/RedLegg/status/2047088384749822384 · Twitter Post
• https://twitter.com/0dayPublishing/status/2046641499660562902 · Twitter Post
• https://crowdstrike.com/en-us/security-advisories/cve-2026-40050 · Note
• https://twitter.com/autumn_good_35/status/2046925111840874786 · Twitter Post
• https://twitter.com/UndercodeNews/status/2046892825418092903 · Twitter Post
• https://reddit.com/r/crowdstrike/comments/1srtr65/situational_awareness_critical_logscale_saas_and · Reddit Post