GO-2025-4125
NoneCVSS
—
EPSS
—
Published
Nov 17, 2025
CISA due date
—
The record
Observability Operator is vulnerable to Incorrect Privilege Assignment through its Custom Resource MonitorStack in github.com/rhobs/observability-operator
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/rhobs/observability-operator | 0 | 1.3.0 |