Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-14893

IBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container image

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Observability with Instana (Agent)

  • Build 1.0.303 to ≤ 1.0.320affected

References