Open-feature vulnerabilities
We track 2 vulnerabilities in Open-feature products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Open-feature vulnerabilities
- 7.5 High severity
flagd: Allocation of Resources Without Limits or Throttling
flagd is a feature flag daemon with a Unix philosophy. Prior to 0.14.2, flagd exposes OFREP (/ofrep/v1/evaluate/...) and gRPC (evaluation.v1, evaluation.v2) endpoints for feature flag evaluation. These endpoints are designed to be publicly accessible by client
- 8.8 High severity
open-feature-operator: Improper Privilege Management
The OpenFeature Operator allows users to expose feature flags to applications. Assuming the pre-existence of a vulnerability that allows for arbitrary code execution, an attacker could leverage the lax permissions configured on `open-feature-operator-controlle