Skip to content
OpenAdvisories

Vendor

vectordotdev

3 known vulnerabilities.

Products

vector 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-77621

    Vector: Arbitrary file write in the file sink via templated path (path traversal).

    Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated path from event fields and opens the result without confining it to an intended directory. When an untrusted source supplies an event field…

    vectordotdev vector