Observability with Instana (Agent) vulnerabilities

3 known vulnerabilities in Observability with Instana (Agent) from IBM. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Observability with Instana (Agent): Incorrect Authorization

  CVE-2026-19283Sep 4, 2026IBM

  IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated remote attacker to obtain sensitive information, caused by missing destination namespace validation when copying etcd mTLS client crede

• 9.6 Critical severity

  Observability with Instana (Agent): Improper Access Control

  CVE-2026-19274Sep 4, 2026IBM

  IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated Kubernetes tenant to hijack or permanently destroy another tenant's cluster-level RBAC permissions, caused by cluster-scoped RBAC objec

• 7.3 High severity

  Observability with Instana (Agent): Improperly Controlled Modification of Object Prototype Attributes

  CVE-2026-14893Jul 28, 2026IBM

  IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API.