CVE-2025-53106

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-53106
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53106.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-53106
Aliases
Published
2025-07-02T13:28:08.825Z
Modified
2026-07-15T16:34:15.145693Z
Severity
  • 8.8 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator
Summary
Graylog vulnerable to privilege escalation through API tokens
Details

Graylog is a free and open log management platform. In versions 6.2.0 to before 6.2.4 and 6.3.0-alpha.1 to before 6.3.0-rc.2, Graylog users can gain elevated privileges by creating and using API tokens for the local Administrator or any other user for whom the malicious user knows the ID. For the attack to succeed, the attacker needs a user account in Graylog. They can then proceed to issue hand-crafted requests to the Graylog REST API and exploit a weak permission check for token creation. This issue has been patched in versions 6.2.4 and 6.3.0-rc.2. A workaround involves disabling the respective configuration found in System > Configuration > Users > "Allow users to create personal access tokens".

Database specific 
{
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53106.json",
    "cwe_ids": [
        "CWE-285"
    ]
}
References

Affected packages

Git / github.com/graylog2/graylog2-server

Affected ranges

Type
GIT
Repo
https://github.com/graylog2/graylog2-server
Events
Introduced
f35438d187e32050ff4d51e4fb93a70341982ceb
Fixed
a78fb0509479a3717340c08b017473f871dc99f7
Introduced
0d8cfbd6a83f50904266dfaa9b89e9c9c7871d6f
Fixed
6936bd16a783c2944a3d2f1e83902062520f90e3
Fixed
9215b8f1fd32566c31e6f7447ed864df3590c157
Database specific 
{
    "cpe": [
        "cpe:2.3:a:graylog:graylog:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:graylog:graylog:6.3.0:-:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "6.2.0"
        },
        {
            "fixed": "6.2.4"
        },
        {
            "introduced": "6.3.0-NA"
        },
        {
            "last_affected": "6.3.0-NA"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

6.*
6.2.0
6.2.1
6.2.2
6.2.3
6.3.0-NA

Database specific

vanir_signatures_modified 
"2026-07-15T16:34:15Z"
vanir_signatures 
[
    {
        "target": {
            "function": "generateNewToken",
            "file": "graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java"
        },
        "id": "CVE-2025-53106-0216eb68",
        "digest": {
            "function_hash": "297229178380450500879284396330758389670",
            "length": 1098.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157"
    },
    {
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java"
        },
        "id": "CVE-2025-53106-03b34746",
        "digest": {
            "line_hashes": [
                "277470025549068196207473872230798702756",
                "213350747248685894180288269430623234210",
                "46285345180184784750628872071141498174",
                "198857085031748927083092994901829663926",
                "19043489527634619119675029873731552360",
                "74821875793967852550681757980157606349",
                "171472310630970994858951151706521670169",
                "160511112623206634128824880142862707967",
                "187958191288577331409581309876689933528"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157"
    },
    {
        "target": {
            "function": "createTokenFailsIfCreateNotAllowed",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-25313d41",
        "digest": {
            "function_hash": "128554153462761691944501812987311941228",
            "length": 517.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e83902062520f90e3"
    },
    {
        "target": {
            "function": "prepareMocks",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-3f15c815",
        "digest": {
            "function_hash": "5759872377490520259959178995752506061",
            "length": 749.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157"
    },
    {
        "target": {
            "function": "adminCanCreateTokensForOtherUsers",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-6b1083a4",
        "digest": {
            "function_hash": "312793707894831113562892474324059958809",
            "length": 741.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157"
    },
    {
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-6d88e812",
        "digest": {
            "line_hashes": [
                "90485983575100156530752129856638387817",
                "334262487353112448617567553208708463259",
                "230821171301508621385307411815876768725",
                "181680008639747164753567723491294776498",
                "104783717114479473243916264962590368492",
                "150526876918479547853710265495709451617",
                "307839165573127510375648079042549267692",
                "143410415836754432310931151659918814514",
                "247166672828119334267051469497598589447",
                "129771926698474027642390985853157920927",
                "186719045349405309667551995282647919188",
                "308738101167914240022360065304595450134",
                "247166672828119334267051469497598589447",
                "11628761433708715049366468159301196242",
                "66312281964889362805059983141731639102",
                "325067917381758429547447760899376886181",
                "79675155063705604784114208205180268139",
                "103054866953463833048278290282097977060",
                "229351144939156181907215549670814206823",
                "183156115301673578273001617387225750423",
                "66883313176635216595628157474393036419",
                "74414724297447318528429611578222181172",
                "88062321217513793133802325665431005485",
                "329711255935078113456050451609132496397",
                "24259688101776805737816002010921207006",
                "211474543409470562152178564164818330092",
                "332622726385076205681484060570106467647",
                "234381670040876436661088387640845306822",
                "248829368029167873496512016883098041114",
                "322997815328925434252262268658806225208",
                "15245998996468238531922042996273203081",
                "70004651412761142804958023837780506903",
                "171329267537587350556450969906368060648",
                "132062207096886186836163228353617543798",
                "166804417023476019159104163999417224258",
                "215927012246559519535138397224078388641",
                "227681462415743017494432527162237815361",
                "89186080646741060350895919608605789522",
                "249009100372829343648769539890403504863",
                "147205041120201762334732002648366123906",
                "284777408568448224845966838219159971819",
                "129480674920027252771135169435756387777",
                "95681988771765882354356264335974957764",
                "110276464390579022586927278271765261730",
                "272099790243565143835621719938034628995"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e83902062520f90e3"
    },
    {
        "target": {
            "file": "graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java"
        },
        "id": "CVE-2025-53106-7321cc7a",
        "digest": {
            "line_hashes": [
                "277470025549068196207473872230798702756",
                "213350747248685894180288269430623234210",
                "46285345180184784750628872071141498174",
                "198857085031748927083092994901829663926",
                "19043489527634619119675029873731552360",
                "74821875793967852550681757980157606349",
                "171472310630970994858951151706521670169",
                "160511112623206634128824880142862707967",
                "187958191288577331409581309876689933528"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e83902062520f90e3"
    },
    {
        "target": {
            "function": "createTokenSucceedsEvenWithNULLBody",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-81fdc148",
        "digest": {
            "function_hash": "213131985206594044247049977106754514061",
            "length": 684.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157"
    },
    {
        "target": {
            "function": "createTokenSucceedsEvenWithNULLBody",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-887ce7d5",
        "digest": {
            "function_hash": "213131985206594044247049977106754514061",
            "length": 684.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e83902062520f90e3"
    },
    {
        "target": {
            "function": "createTokenAndPrepareMocks",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-8c65f639",
        "digest": {
            "function_hash": "334266242612553873265028823611117179690",
            "length": 435.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e83902062520f90e3"
    },
    {
        "target": {
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-96612bec",
        "digest": {
            "line_hashes": [
                "90485983575100156530752129856638387817",
                "334262487353112448617567553208708463259",
                "230821171301508621385307411815876768725",
                "181680008639747164753567723491294776498",
                "104783717114479473243916264962590368492",
                "150526876918479547853710265495709451617",
                "307839165573127510375648079042549267692",
                "143410415836754432310931151659918814514",
                "247166672828119334267051469497598589447",
                "129771926698474027642390985853157920927",
                "186719045349405309667551995282647919188",
                "308738101167914240022360065304595450134",
                "247166672828119334267051469497598589447",
                "11628761433708715049366468159301196242",
                "66312281964889362805059983141731639102",
                "325067917381758429547447760899376886181",
                "79675155063705604784114208205180268139",
                "103054866953463833048278290282097977060",
                "229351144939156181907215549670814206823",
                "183156115301673578273001617387225750423",
                "66883313176635216595628157474393036419",
                "74414724297447318528429611578222181172",
                "88062321217513793133802325665431005485",
                "329711255935078113456050451609132496397",
                "24259688101776805737816002010921207006",
                "211474543409470562152178564164818330092",
                "332622726385076205681484060570106467647",
                "234381670040876436661088387640845306822",
                "248829368029167873496512016883098041114",
                "322997815328925434252262268658806225208",
                "15245998996468238531922042996273203081",
                "70004651412761142804958023837780506903",
                "171329267537587350556450969906368060648",
                "132062207096886186836163228353617543798",
                "166804417023476019159104163999417224258",
                "215927012246559519535138397224078388641",
                "227681462415743017494432527162237815361",
                "89186080646741060350895919608605789522",
                "249009100372829343648769539890403504863",
                "147205041120201762334732002648366123906",
                "284777408568448224845966838219159971819",
                "129480674920027252771135169435756387777",
                "95681988771765882354356264335974957764",
                "110276464390579022586927278271765261730",
                "272099790243565143835621719938034628995"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157"
    },
    {
        "target": {
            "function": "adminCanCreateTokensForOtherUsers",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-9fc0ba43",
        "digest": {
            "function_hash": "312793707894831113562892474324059958809",
            "length": 741.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e83902062520f90e3"
    },
    {
        "target": {
            "function": "createTokenFailsIfCreateNotAllowed",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-b387e57d",
        "digest": {
            "function_hash": "128554153462761691944501812987311941228",
            "length": 517.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157"
    },
    {
        "target": {
            "function": "generateNewToken",
            "file": "graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java"
        },
        "id": "CVE-2025-53106-b54bddc8",
        "digest": {
            "function_hash": "297229178380450500879284396330758389670",
            "length": 1098.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e83902062520f90e3"
    },
    {
        "target": {
            "function": "createTokenAndPrepareMocks",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-d2200c84",
        "digest": {
            "function_hash": "234522821003989590075115094527373712990",
            "length": 1534.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157"
    },
    {
        "target": {
            "function": "createTokenAndPrepareMocks",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-e02849b1",
        "digest": {
            "function_hash": "234522821003989590075115094527373712990",
            "length": 1534.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e83902062520f90e3"
    },
    {
        "target": {
            "function": "regularUserCannotCreateTokensForOtherUsers",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-e97f7038",
        "digest": {
            "function_hash": "221774421853992776215067017851329155669",
            "length": 499.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157"
    },
    {
        "target": {
            "function": "regularUserCannotCreateTokensForOtherUsers",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-f7c89cde",
        "digest": {
            "function_hash": "221774421853992776215067017851329155669",
            "length": 499.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e83902062520f90e3"
    },
    {
        "target": {
            "function": "createTokenAndPrepareMocks",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-f86d8db9",
        "digest": {
            "function_hash": "334266242612553873265028823611117179690",
            "length": 435.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157"
    },
    {
        "target": {
            "function": "prepareMocks",
            "file": "graylog2-server/src/test/java/org/graylog2/rest/resources/users/UsersResourceTest.java"
        },
        "id": "CVE-2025-53106-fe150578",
        "digest": {
            "function_hash": "5759872377490520259959178995752506061",
            "length": 749.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e83902062520f90e3"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53106.json"