Graylog 7.1.3 → 7.2.1

Vulnerabilities fixed by this upgrade

• 7.2 GHSA-w9wq-g358-3x8g Privilege escalation via user creation and user permission/role updates
• 5.3 GHSA-vpqc-v737-94g9 Palo Alto Networks input parser can be exploited to consume excessive CPU and delay message processing
• 7.5 GHSA-xwgc-q8x5-538w IPFIX input parser can be exploited to consume excessive CPU and block message processing
• 6.3 CVE-2026-69190 Manager-to-Owner privilege escalation on saved searches and dashboards
• 5.0 CVE-2026-55425 System Catalog titles endpoint can be used to retrieve values of protected database fields

Breaking changes

None in the release notes.

Security changes

• security Fixes GHSA-w9wq-g358-3x8g: Privilege escalation via user creation and user permission/role updates in 7.1.9
• security Fixes CVE-2026-69190: Manager-to-Owner privilege escalation on saved searches and dashboards in 7.1.4

Every release in between