CVE-2026-14893

HIGH

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API.

CVSS v3.1 Score

7.3
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Attack Vector
LOCAL
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
LOW
Published: 7/28/2026Modified: 7/30/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-14893 — IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana...

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API.

CVE-2026-14893
NIST NVD

References (1)

https://www.ibm.com/support/pages/node/7281349