TI-2026-45286 CVE-2026-63645
OpenObserve: Unauthenticated /config/runtime endpoint exposes PostgreSQL database credentials
Priority LOW 39
OpenObserve is a cloud-native observability platform.
Vulnerabilities
9 records
TI-2026-28348 CVE-2026-39361
OpenObserve has a SSRF Protection Bypass via IPv6 Bracket Notation in validate_enrichment_url
Priority HIGH 67
OpenObserve is a cloud-native observability platform.
Priority HIGH 72
OpenObserve is a cloud-native observability platform.
TI-2025-40082 CVE-2025-64744
OpenObserve Vulnerable to HTML Injection in Organization Invitation Emails
Priority MEDIUM 50
OpenObserve is a cloud-native observability platform.
TI-2024-36995 CVE-2024-55954
OpenObserve Improper Authorization Allows Admin User to Remove Root User
Priority HIGH 73
OpenObserve is a cloud-native observability platform.
TI-2024-27853 CVE-2024-41809
OpenObserve Cross-site Scripting (XSS) vulnerability in `openobserve/web/src/views/MemberSubscription.vue`
Priority LOW 38
OpenObserve is an open-source observability platform.
TI-2024-27852 CVE-2024-41808
OpenObserve stored XSS vulnerability may lead to complete account takeover
Priority HIGH 73
The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uploaded in a given log.
Priority HIGH 76
OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale.
Priority MEDIUM 40
OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale.