Skip to content
OpenAdvisories
High · 7.3 CVE-2026-14893 EUVD-2026-50058GHSA-vhqp-r6hx-7vw5

IBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container image

Published Jul 28, 2026 · Updated Jul 29, 2026 · Assigned by ibm

Vendor: IBM Product: Observability with Instana (Agent)

Description

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API.

Affected products

VendorProductAffectedFixed
IBM Observability with Instana (Agent) Build 1.0.303 – ≤ 1.0.320 —

References