CrowdStrike Patches Critical Path Traversal Vulnerability in LogScale

#cybersecurity #infosec

Summary

CrowdStrike patched a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale that allows remote attackers to read arbitrary files from self-hosted server filesystems.

Take Action:

If you use self-hosted LogScale, plan a quick update to a patched version ASAP. Always keep your cluster API endpoints behind a firewall or VPN to limit exposure to attackers.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines