Skip to content
OpenAdvisories

Vendor

rhobs

1 known vulnerabilities.

Products

observability-operator 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-2843

    Observability-operator: observability operator privilege escalation

    A flaw was found in the Observability Operator. The Operator creates a ServiceAccount with *ClusterRole* upon deployment of the *Namespace-Scoped* Custom Resource MonitorStack. This issue allows an adversarial Kubernetes Account with only namespaced-level rol…

    Red Hat rhobs observability-operator Cluster Observability Operator 1.3.1 Go