EUVD-2026-87525

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...

CVE-2026-100525 OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...

CVE-2026-100525 OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...

CVE-2026-100525

The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 fails to enforce the operator.read scope on its authenticated metrics endpoint. In environments utilizing identity-bearing Gateway authentication modes, such as trusted-proxy , an authenticated c...

CVE-2026-100525 OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...

CLEANSTART-2026-DS50998 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the loki package. Prometheus is an open-source monitoring system and time series database...

CVE-2026-100525: Missing Authorization

The OpenClaw Prometheus diagnostics plugin @openclaw/diagnostics-prometheus before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint. In deployments using an identity-bearing Gateway authentication mode such as trusted-proxy, a caller whose effective...

PT-2026-99162

Name of the Vulnerable Software and Affected Versions @openclaw/diagnostics-prometheus versions prior to 2026.9.3 Description The authenticated metrics endpoint fails to enforce the operator.read scope. In deployments utilizing identity-bearing Gateway authentication modes, such as trusted-proxy,...

CLEANSTART-2026-NE14632 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-DS09618 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...

Fedora 45 : prometheus-podman-exporter (2026-8590121cf7)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8590121cf7 advisory. release v2.0.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

[SECURITY] Fedora 45 Update: prometheus-podman-exporter-2.0.0-1.fc45

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

CLEANSTART-2026-JD89615 Security fix for CVE-2021-29622 applied in: prometheus 2.27.1-r0, prometheus-fips 2.27.1-r0

CVE-2021-29622 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PO69653 Security fix for CVE-2022-46146 applied in: prometheus 2.40.4-r1, prometheus-fips 2.40.4-r1, prometheus-node-exporter 1.5.0-r0, prometheus-node-exporter-fips 1.5.0-r0

CVE-2022-46146 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QQ16629 Security fix for CVE-2020-16248 applied in: prometheus-blackbox-exporter 0.18.0-r0

Security vulnerability affects the prometheus-blackbox-exporter package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BO10276 Security fix for CVE-2024-35255 applied in: cortex-fips 1.17.2-r1, prometheus 2.47.2-r0, prometheus-operator 0.69.1-r0, stargate 1.0.90-r4

CVE-2024-35255 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0

CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KS29431 Security fix for CVE-2026-32285 applied in: gitlab-runner 18.11.1-r0, grafana-alloy 1.13.1-r1, kubevela 1.10.8-r0, prometheus 3.11.0-r0, tempo 2.10.3-r0, tempo 2.9.1-r1, tempo-fips 2.10.3-r0, tempo-fips 2.9.1-r1, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.98.0-r4

CVE-2026-32285 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IS77725 Security fix for CVE-2023-40577 applied in: prometheus 2.47.2-r0, prometheus-alertmanager 0.26.0-r0, promxy 0.0.93-r1, promxy-fips 0.0.93-r1

CVE-2023-40577 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IX15108 Security fix for CVE-2024-6104 applied in: prometheus 2.47.2-r0, rekor-backfill-index 1.2.2-r0

CVE-2024-6104 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...