Vulnerabilities

TI-2026-41168 CVE-2026-57230

OpenReplay: Authenticated ClickHouse SQL injection via session search

LOW 24

OpenReplay is a self-hosted session replay suite.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00339 Published 2026-07-10 Fixed in 1.27.0 CWE-89

TI-2026-40334 CVE-2026-55881

LOW 32

OpenReplay is a self-hosted session replay suite.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00427 Published 2026-07-10 Fixed in 1.27.0 CWE-639

TI-2026-40333 CVE-2026-55880

LOW 31

OpenReplay is a self-hosted session replay suite.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00338 Published 2026-07-10 No fix listed CWE-639

TI-2026-40332 CVE-2026-55879

MEDIUM 43

OpenReplay is a self-hosted session replay suite.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00499 Published 2026-07-10 Fixed in 1.25.0 CWE-79

TI-2026-33096 CVE-2026-45296

LOW 33

OpenReplay is a self-hosted session replay suite.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00231 Published 2026-05-28 Fixed in 1.26.0 CWE-284

TI-2026-33097 CVE-2026-45297

LOW 29

OpenReplay is a self-hosted session replay suite.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00207 Published 2026-05-28 Fixed in 1.26.0 CWE-285

TI-2026-22713 CVE-2026-28443

LOW 37

OpenReplay is a self-hosted session replay suite.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00396 Published 2026-03-05 Fixed in 1.20.0 CWE-89

TI-2023-26090 CVE-2023-48226

LOW 30

OpenReplay is a self-hosted session replay suite.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00779 Published 2023-11-21 No fix listed CWE-20