Skip to content
OpenAdvisories

Vendor

openobserve

10 known vulnerabilities.

Products

openobserve 10
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-126065

    OpenObserve: Empty external password allows authentication bypass

    OpenObserve is a cloud-native observability platform. Prior to 1.1.0, the shared authentication validator in src/api/common/src/auth/validator.rs accepts an empty or whitespace-only HTTP Basic password for an account whose password_ext value is missing or emp…

    openobserve openobserve
  • Critical 10.0
    CVE-2024-24830

    OpenObserve Privilege Escalation Vulnerability in Users API

    OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale. A vulnerability has been identified in the "/api/{org_id}/users" endpoint. This vulnerability allows any authenticated regular…

    openobserve openobserve
  • Critical 9.1
    CVE-2024-25106

    OpenObserve Unauthorized Access Vulnerability in Users API

    OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale. A critical vulnerability has been identified in the "/api/{org_id}/users/{email_id}" endpoint. This vulnerability allows any a…

    openobserve openobserve