{"id":"AZL-112688","summary":"CVE-2026-119566 affecting package telegraf 1.31.0-38","details":"Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD or Google IAM bearer tokens by redirecting remote_write requests to another host. Attackers controlling the remote-write endpoint or a redirecting server can return a 3xx to their host and replay the token, for example to write metrics to the victim's backend.","modified":"2026-11-14T05:30:17Z","published":"2026-10-30T12:16:44Z","upstream":["CVE-2026-119566"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119566"}],"affected":[{"package":{"name":"telegraf","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/telegraf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.31.0-38"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112688.json"}}],"schema_version":"1.9.2"}