OpenTSDB — Vulnerabilities & Security Advisories 3

OpenTSDB serves as a distributed, scalable time series database for storing and serving metrics collected from computer systems and applications, primarily used in monitoring and observability platforms. Historically, it has been susceptible to remote code execution vulnerabilities through insecure deserialization and improper input validation, as well as cross-site scripting flaws due to insufficient output encoding. Privilege escalation risks have also been identified through authentication bypass mechanisms. While no major public security incidents have been widely documented, the three CVEs on record highlight persistent concerns around input validation and secure deserialization, emphasizing the need for proper hardening and timely patching in production deployments.