6.3
Medium
CVE-2026-119566 Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects
Description
Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD or Google IAM bearer tokens by redirecting remote_write requests to another host. Attackers controlling the remote-write endpoint or a redirecting server can return a 3xx to their host and replay the token, for example to write metrics to the victim's backend.
CVSS 4.0 detail
Vector CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:NExploitable remotely over the network, without an account and without any user action; the impact on data or service is limited.
- Attack vector
- Network
- Attack complexity
- High
- Attack requirements
- Present
- Privileges required
- None
- Interaction
- None
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
- Confidentiality of other systems
- None
- Integrity of other systems
- None
- Availability of other systems
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| prometheus 3.15 | earliest → 3.15.1 | No fix stated |
References
- github.com github.com
- github.com github.com
- github.com github.com
- abraxaslabs.tech abraxaslabs.tech
- github.com github.com
- VulnCheck Advisory: Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects www.vulncheck.com
Timeline
- Published
- Last modified
Other CVEs of prometheus
The 6 CVEs of prometheus →
CVE-2026-44903
Prometheus is an open-source monitoring system and time series database
5.1
Medium
CVE-2026-42154
Prometheus is an open-source monitoring system and time series database
7.5
High
CVE-2026-42151
Prometheus is an open-source monitoring system and time series database
7.5
High
CVE-2026-40179
Prometheus is an open-source monitoring system and time series database
5.3
Medium