Graylog
Logging · products/graylog.yaml · RSS
Latest 7.2.1 Oct 19, 2026
Lifecycle
| Branch | Latest | Released | End of life |
|---|---|---|---|
| 7.1 | 7.1.11 | May 4, 2026 | May 4, 2027 · maintained |
| 7.0 | 7.0.15 | Nov 3, 2025 | Nov 3, 2026 · maintained |
| 6.3 | 6.3.15 | Jun 30, 2025 | Jun 30, 2026 · ended |
| 6.2 | 6.2.14 | Apr 28, 2025 | Apr 28, 2026 · ended |
| 6.1 | 6.1.16 | Oct 20, 2024 | Oct 20, 2025 · ended |
| 6.0 | 6.0.14 | May 7, 2024 | May 8, 2025 · ended |
| 5.2 | 5.2.12 | Nov 1, 2023 | Nov 1, 2024 · ended |
| 5.1 | 5.1.13 | May 17, 2023 | May 17, 2024 · ended |
| 5.0 | 5.0.13 | Dec 6, 2022 | Dec 6, 2023 · ended |
| 4.3 | 4.3.15 | May 25, 2022 | May 25, 2023 · ended |
| 4.2 | 4.2.13 | Oct 13, 2021 | Nov 30, 2022 · ended |
| 4.1 | 4.1.14 | Jun 23, 2021 | May 17, 2022 · ended |
| 4.0 | 4.0.17 | Nov 17, 2020 | Oct 13, 2021 · ended |
| 3.3 | 3.3.17 | May 20, 2020 | Apr 12, 2022 · ended |
| 3.2 | 3.2.6 | Jan 31, 2020 | May 20, 2020 · ended |
| 3.1 | 3.1.4 | Aug 15, 2019 | Jan 31, 2020 · ended |
| 3.0 | 3.0.2 | Feb 11, 2019 | Aug 15, 2019 · ended |
| 2.5 | 2.5.2 | Dec 1, 2018 | Feb 11, 2019 · ended |
| 2.4 | 2.4.7 | Dec 22, 2017 | Mar 1, 2019 · ended |
| 2.3 | 2.3.2 | Jul 26, 2017 | Dec 22, 2017 · ended |
| 2.2 | 2.2.3 | Feb 9, 2017 | Jul 26, 2017 · ended |
| 2.1 | 2.1.3 | Sep 1, 2016 | Feb 9, 2017 · ended |
| 2.0 | 2.0.3 | Apr 26, 2016 | Sep 1, 2016 · ended |
| 1.3 | 1.3.4 | Dec 8, 2015 | Apr 26, 2016 · ended |
| 1.2 | 1.2.2 | Sep 14, 2015 | Dec 8, 2015 · ended |
| 1.1 | 1.1.6 | Jun 4, 2015 | Sep 14, 2015 · ended |
| 1.0 | 1.0.2 | Feb 17, 2015 | Jun 4, 2015 · ended |
Recent releases
securityFixes GHSA-w9wq-g358-3x8g: Privilege escalation via user creation and user permission/role updates
securityFixes CVE-2026-69190: Manager-to-Owner privilege escalation on saved searches and dashboards
securityFixes CVE-2026-55841: Fortigate syslog message parser can be exploited to modify or delete fields from the original message
securityFixes CVE-2026-55867: Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens
Security advisories
5.3 GHSA-vpqc-v737-94g9 Palo Alto Networks input parser can be exploited to consume excessive CPU and delay message processing
7.5 GHSA-xwgc-q8x5-538w IPFIX input parser can be exploited to consume excessive CPU and block message processing
5.0 CVE-2026-55425 System Catalog titles endpoint can be used to retrieve values of protected database fields
7.5 CVE-2026-55841 Fortigate syslog message parser can be exploited to modify or delete fields from the original message
5.3 CVE-2026-55867 Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens
6.5 CVE-2025-30373 Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value