PT-2025-3162

Name of the Vulnerable Software and Affected Versions OpenObserve versions prior to 0.14.1 Description A vulnerability in the user management endpoint /api/org id/users/email id allows an "Admin" role user to remove a "Root" user from the organization, violating the intended privilege hierarchy...

PT-2024-20597

Name of the Vulnerable Software and Affected Versions OpenObserve versions prior to 0.8.0 Description A vulnerability has been identified in the "/api/org id/users" endpoint, allowing any authenticated regular user to add new users with elevated privileges, including the 'root' role, to an...