CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-39361

OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validate_enrichment_url function in src/handler/http/request/enrichment_table/mod.rs fails to block IPv6 addresses because Rust's url crate returns them with surrounding brackets (e.g. "[::1]" not "::1"). An authenticated attacker can reach internal services blocked from external access. On cloud deployments this enables retrieval of IAM credentials via AWS IMDSv1 (169.254.169.254), GCP metadata, or Azure IMDS. On self-hosted deployments it allows probing internal network services.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 8.9%

CVSS Severity

CVSS v3 Score 7.7

References

Products affected by CVE-2026-39361

Openobserve » Openobserve » Version: N/A

cpe:2.3:a:openobserve:openobserve:-
Openobserve » Openobserve » Version: 0.1.5

cpe:2.3:a:openobserve:openobserve:0.1.5
Openobserve » Openobserve » Version: 0.1.6

cpe:2.3:a:openobserve:openobserve:0.1.6
Openobserve » Openobserve » Version: 0.1.7

cpe:2.3:a:openobserve:openobserve:0.1.7
Openobserve » Openobserve » Version: 0.1.8

cpe:2.3:a:openobserve:openobserve:0.1.8
Openobserve » Openobserve » Version: 0.10.0

cpe:2.3:a:openobserve:openobserve:0.10.0
Openobserve » Openobserve » Version: 0.10.1

cpe:2.3:a:openobserve:openobserve:0.10.1
Openobserve » Openobserve » Version: 0.10.2

cpe:2.3:a:openobserve:openobserve:0.10.2
Openobserve » Openobserve » Version: 0.10.3

cpe:2.3:a:openobserve:openobserve:0.10.3
Openobserve » Openobserve » Version: 0.10.4

cpe:2.3:a:openobserve:openobserve:0.10.4
Openobserve » Openobserve » Version: 0.10.5

cpe:2.3:a:openobserve:openobserve:0.10.5
Openobserve » Openobserve » Version: 0.10.6

cpe:2.3:a:openobserve:openobserve:0.10.6
Openobserve » Openobserve » Version: 0.10.7

cpe:2.3:a:openobserve:openobserve:0.10.7
Openobserve » Openobserve » Version: 0.10.8

cpe:2.3:a:openobserve:openobserve:0.10.8
Openobserve » Openobserve » Version: 0.10.9

cpe:2.3:a:openobserve:openobserve:0.10.9
Openobserve » Openobserve » Version: 0.11.0

cpe:2.3:a:openobserve:openobserve:0.11.0
Openobserve » Openobserve » Version: 0.12.0

cpe:2.3:a:openobserve:openobserve:0.12.0
Openobserve » Openobserve » Version: 0.12.1

cpe:2.3:a:openobserve:openobserve:0.12.1
Openobserve » Openobserve » Version: 0.12.2

cpe:2.3:a:openobserve:openobserve:0.12.2
Openobserve » Openobserve » Version: 0.13.0

cpe:2.3:a:openobserve:openobserve:0.13.0
Openobserve » Openobserve » Version: 0.13.1

cpe:2.3:a:openobserve:openobserve:0.13.1
Openobserve » Openobserve » Version: 0.13.2

cpe:2.3:a:openobserve:openobserve:0.13.2
Openobserve » Openobserve » Version: 0.14.0

cpe:2.3:a:openobserve:openobserve:0.14.0
Openobserve » Openobserve » Version: 0.14.1

cpe:2.3:a:openobserve:openobserve:0.14.1
Openobserve » Openobserve » Version: 0.14.2

cpe:2.3:a:openobserve:openobserve:0.14.2
Openobserve » Openobserve » Version: 0.14.3

cpe:2.3:a:openobserve:openobserve:0.14.3
Openobserve » Openobserve » Version: 0.14.4

cpe:2.3:a:openobserve:openobserve:0.14.4
Openobserve » Openobserve » Version: 0.14.5

cpe:2.3:a:openobserve:openobserve:0.14.5
Openobserve » Openobserve » Version: 0.14.6

cpe:2.3:a:openobserve:openobserve:0.14.6
Openobserve » Openobserve » Version: 0.14.7

cpe:2.3:a:openobserve:openobserve:0.14.7
Openobserve » Openobserve » Version: 0.15.0

cpe:2.3:a:openobserve:openobserve:0.15.0
Openobserve » Openobserve » Version: 0.15.1

cpe:2.3:a:openobserve:openobserve:0.15.1
Openobserve » Openobserve » Version: 0.15.2

cpe:2.3:a:openobserve:openobserve:0.15.2
Openobserve » Openobserve » Version: 0.15.3

cpe:2.3:a:openobserve:openobserve:0.15.3
Openobserve » Openobserve » Version: 0.16.0

cpe:2.3:a:openobserve:openobserve:0.16.0
Openobserve » Openobserve » Version: 0.16.1

cpe:2.3:a:openobserve:openobserve:0.16.1
Openobserve » Openobserve » Version: 0.16.2

cpe:2.3:a:openobserve:openobserve:0.16.2
Openobserve » Openobserve » Version: 0.16.3

cpe:2.3:a:openobserve:openobserve:0.16.3
Openobserve » Openobserve » Version: 0.2.0

cpe:2.3:a:openobserve:openobserve:0.2.0
Openobserve » Openobserve » Version: 0.20.0

cpe:2.3:a:openobserve:openobserve:0.20.0
Openobserve » Openobserve » Version: 0.20.1

cpe:2.3:a:openobserve:openobserve:0.20.1
Openobserve » Openobserve » Version: 0.20.2

cpe:2.3:a:openobserve:openobserve:0.20.2
Openobserve » Openobserve » Version: 0.20.3

cpe:2.3:a:openobserve:openobserve:0.20.3
Openobserve » Openobserve » Version: 0.3.0

cpe:2.3:a:openobserve:openobserve:0.3.0
Openobserve » Openobserve » Version: 0.3.1

cpe:2.3:a:openobserve:openobserve:0.3.1
Openobserve » Openobserve » Version: 0.3.2

cpe:2.3:a:openobserve:openobserve:0.3.2
Openobserve » Openobserve » Version: 0.30.0

cpe:2.3:a:openobserve:openobserve:0.30.0
Openobserve » Openobserve » Version: 0.30.1

cpe:2.3:a:openobserve:openobserve:0.30.1
Openobserve » Openobserve » Version: 0.30.2

cpe:2.3:a:openobserve:openobserve:0.30.2
Openobserve » Openobserve » Version: 0.4.1

cpe:2.3:a:openobserve:openobserve:0.4.1
Openobserve » Openobserve » Version: 0.4.2

cpe:2.3:a:openobserve:openobserve:0.4.2
Openobserve » Openobserve » Version: 0.4.3

cpe:2.3:a:openobserve:openobserve:0.4.3
Openobserve » Openobserve » Version: 0.4.4

cpe:2.3:a:openobserve:openobserve:0.4.4
Openobserve » Openobserve » Version: 0.4.5

cpe:2.3:a:openobserve:openobserve:0.4.5
Openobserve » Openobserve » Version: 0.4.6

cpe:2.3:a:openobserve:openobserve:0.4.6
Openobserve » Openobserve » Version: 0.4.7

cpe:2.3:a:openobserve:openobserve:0.4.7
Openobserve » Openobserve » Version: 0.4.8

cpe:2.3:a:openobserve:openobserve:0.4.8
Openobserve » Openobserve » Version: 0.4.9

cpe:2.3:a:openobserve:openobserve:0.4.9
Openobserve » Openobserve » Version: 0.40.0

cpe:2.3:a:openobserve:openobserve:0.40.0
Openobserve » Openobserve » Version: 0.40.1

cpe:2.3:a:openobserve:openobserve:0.40.1
Openobserve » Openobserve » Version: 0.40.2

cpe:2.3:a:openobserve:openobserve:0.40.2
Openobserve » Openobserve » Version: 0.40.3

cpe:2.3:a:openobserve:openobserve:0.40.3
Openobserve » Openobserve » Version: 0.40.4

cpe:2.3:a:openobserve:openobserve:0.40.4
Openobserve » Openobserve » Version: 0.5.0

cpe:2.3:a:openobserve:openobserve:0.5.0
Openobserve » Openobserve » Version: 0.5.1

cpe:2.3:a:openobserve:openobserve:0.5.1
Openobserve » Openobserve » Version: 0.5.2

cpe:2.3:a:openobserve:openobserve:0.5.2
Openobserve » Openobserve » Version: 0.5.3

cpe:2.3:a:openobserve:openobserve:0.5.3
Openobserve » Openobserve » Version: 0.50.0

cpe:2.3:a:openobserve:openobserve:0.50.0
Openobserve » Openobserve » Version: 0.50.1

cpe:2.3:a:openobserve:openobserve:0.50.1
Openobserve » Openobserve » Version: 0.50.2

cpe:2.3:a:openobserve:openobserve:0.50.2
Openobserve » Openobserve » Version: 0.50.3

cpe:2.3:a:openobserve:openobserve:0.50.3
Openobserve » Openobserve » Version: 0.50.4

cpe:2.3:a:openobserve:openobserve:0.50.4
Openobserve » Openobserve » Version: 0.50.5

cpe:2.3:a:openobserve:openobserve:0.50.5
Openobserve » Openobserve » Version: 0.50.6

cpe:2.3:a:openobserve:openobserve:0.50.6
Openobserve » Openobserve » Version: 0.6.0

cpe:2.3:a:openobserve:openobserve:0.6.0
Openobserve » Openobserve » Version: 0.6.1

cpe:2.3:a:openobserve:openobserve:0.6.1
Openobserve » Openobserve » Version: 0.6.2

cpe:2.3:a:openobserve:openobserve:0.6.2
Openobserve » Openobserve » Version: 0.6.3

cpe:2.3:a:openobserve:openobserve:0.6.3
Openobserve » Openobserve » Version: 0.6.4

cpe:2.3:a:openobserve:openobserve:0.6.4
Openobserve » Openobserve » Version: 0.60.0

cpe:2.3:a:openobserve:openobserve:0.60.0
Openobserve » Openobserve » Version: 0.60.1

cpe:2.3:a:openobserve:openobserve:0.60.1
Openobserve » Openobserve » Version: 0.60.2

cpe:2.3:a:openobserve:openobserve:0.60.2
Openobserve » Openobserve » Version: 0.60.3

cpe:2.3:a:openobserve:openobserve:0.60.3
Openobserve » Openobserve » Version: 0.60.4

cpe:2.3:a:openobserve:openobserve:0.60.4
Openobserve » Openobserve » Version: 0.60.5

cpe:2.3:a:openobserve:openobserve:0.60.5
Openobserve » Openobserve » Version: 0.7.0

cpe:2.3:a:openobserve:openobserve:0.7.0
Openobserve » Openobserve » Version: 0.7.1

cpe:2.3:a:openobserve:openobserve:0.7.1
Openobserve » Openobserve » Version: 0.7.2

cpe:2.3:a:openobserve:openobserve:0.7.2
Openobserve » Openobserve » Version: 0.70.0

cpe:2.3:a:openobserve:openobserve:0.70.0
Openobserve » Openobserve » Version: 0.70.1

cpe:2.3:a:openobserve:openobserve:0.70.1
Openobserve » Openobserve » Version: 0.70.2

cpe:2.3:a:openobserve:openobserve:0.70.2
Openobserve » Openobserve » Version: 0.70.3

cpe:2.3:a:openobserve:openobserve:0.70.3
Openobserve » Openobserve » Version: 0.8.0

cpe:2.3:a:openobserve:openobserve:0.8.0
Openobserve » Openobserve » Version: 0.8.1

cpe:2.3:a:openobserve:openobserve:0.8.1
Openobserve » Openobserve » Version: 0.8.2

cpe:2.3:a:openobserve:openobserve:0.8.2
Openobserve » Openobserve » Version: 0.9.0

cpe:2.3:a:openobserve:openobserve:0.9.0
Openobserve » Openobserve » Version: 0.9.1

cpe:2.3:a:openobserve:openobserve:0.9.1
Openobserve » Openobserve » Version: 0.9.2

cpe:2.3:a:openobserve:openobserve:0.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-39361

Products

Pricing

Contact Us