Graylog 7.1.1 → 7.2.1

Vulnerabilities fixed by this upgrade

• 7.2 GHSA-w9wq-g358-3x8g Privilege escalation via user creation and user permission/role updates
• 5.3 GHSA-vpqc-v737-94g9 Palo Alto Networks input parser can be exploited to consume excessive CPU and delay message processing
• 7.5 GHSA-xwgc-q8x5-538w IPFIX input parser can be exploited to consume excessive CPU and block message processing
• 6.3 CVE-2026-69190 Manager-to-Owner privilege escalation on saved searches and dashboards
• 5.0 CVE-2026-55425 System Catalog titles endpoint can be used to retrieve values of protected database fields
• 7.5 CVE-2026-55841 Fortigate syslog message parser can be exploited to modify or delete fields from the original message
• 5.3 CVE-2026-55867 Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

Breaking changes

None in the release notes.

Security changes

• security Fixes GHSA-w9wq-g358-3x8g: Privilege escalation via user creation and user permission/role updates in 7.1.9
• security Fixes CVE-2026-69190: Manager-to-Owner privilege escalation on saved searches and dashboards in 7.1.4
• security Fixes CVE-2026-55841: Fortigate syslog message parser can be exploited to modify or delete fields from the original message in 7.1.2
• security Fixes CVE-2026-55867: Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens in 7.1.2

Every release in between