CVE-2026-119566mediumCWE-522

CVE-2026-119566: falha de média gravidade em prometheus

Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar prometheus+ Monitorar golang-github-prometheus-common

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.2%
Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD or Google IAM bearer tokens by redirecting remote_write requests to another host. Attackers controlling the remote-write endpoint or a redirecting server can return a 3xx to their host and replay the token, for example to write metrics to the victim's backend.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
prometheus · prometheus
CVEs relacionadas — prometheus

No mesmo produto, das mais perigosas para as menos.

CVE-2021-29622MEDIUMArbitrary redirects under /new endpointEPSS 19.6%CVE-2026-42154HIGHPrometheus: remote read endpoint allows denial of service via crafted snappy payloadEPSS 0.8%CVE-2026-42151HIGHPrometheus Azure AD remote write OAuth client secret exposed via config APIEPSS 0.4%CVE-2026-40179MEDIUMPrometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorerEPSS 0.3%CVE-2026-44903MEDIUMPrometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UIEPSS 0.2%