Critical Unauthenticated Path Traversal in CrowdStrike LogScale

The National Vulnerability Database has detailed a critical path traversal vulnerability, CVE-2026-40050, affecting specific self-hosted versions of CrowdStrike’s LogScale. This flaw allows unauthenticated remote attackers to read arbitrary files from the server filesystem by exploiting a specific cluster API endpoint. The CVSS score of 9.8 highlights the severity, indicating a high potential for exploitation.

While LogScale SaaS customers and Next-Gen SIEM users are unaffected, self-hosted LogScale deployments are at significant risk if this API endpoint is exposed. CrowdStrike has deployed network-level mitigations for SaaS customers and confirmed no evidence of exploitation in their environments. However, organizations running self-hosted LogScale must prioritize upgrading to a patched version immediately to close this critical security gap.