Priority HIGH 76
OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale.
openobserve
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
openobserve records in CISA KEVNo openobserve vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records
TI-2024-36995 CVE-2024-55954
OpenObserve Improper Authorization Allows Admin User to Remove Root User
Priority HIGH 73
OpenObserve is a cloud-native observability platform.
TI-2024-27852 CVE-2024-41808
OpenObserve stored XSS vulnerability may lead to complete account takeover
Priority HIGH 73
The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uploaded in a given log.
Priority HIGH 72
OpenObserve is a cloud-native observability platform.
TI-2026-28348 CVE-2026-39361
OpenObserve has a SSRF Protection Bypass via IPv6 Bracket Notation in validate_enrichment_url
Priority HIGH 67
OpenObserve is a cloud-native observability platform.
TI-2025-40082 CVE-2025-64744
OpenObserve Vulnerable to HTML Injection in Organization Invitation Emails
Priority MEDIUM 50
OpenObserve is a cloud-native observability platform.
Priority MEDIUM 40
OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale.
TI-2026-45286 CVE-2026-63645
OpenObserve: Unauthenticated /config/runtime endpoint exposes PostgreSQL database credentials
Priority LOW 39
OpenObserve is a cloud-native observability platform.
TI-2024-27853 CVE-2024-41809
OpenObserve Cross-site Scripting (XSS) vulnerability in `openobserve/web/src/views/MemberSubscription.vue`
Priority LOW 38
OpenObserve is an open-source observability platform.