openobserve — Vulnerabilities & Security Advisories 8

Openobserve is an observability platform designed for log, metric, and trace management. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, with eight CVEs documented to date. The platform's security posture has been challenged by improper input validation and insufficient access controls in its web interface. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities in its web components suggests potential risks for deployments exposed to untrusted networks. Organizations should implement strict network segmentation and timely patching to mitigate these known weaknesses.