CVE-2026-126065

The cloud-native observability platform OpenObserve is vulnerable to an authentication bypass in versions prior to 1.1.0 . The root cause is located in the shared authentication validator at src/api/common/src/auth/validator.rs, which incorrectly accepts empty or whitespace-only HTTP Basic passwo...