Skip to content
OpenAdvisories

Product · openfaas

faas

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-81664

    OpenFaaS Gateway 0.27.11 through 0.27.13 Missing Authentication on the /system/telemetry Route

    The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basic_auth is enabled, wraps each administrative /system/* handler in auth.DecorateWithBasicAuth. TelemetryHandler was left out of that wrap block from 0.27.11, which introduced…

    openfaas faas