CVE-2026-14893 — IBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container image

CVE-2026-14893

IBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container image PUBLISHED

Description (CNA)

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API.

Affected (CNA)

Vendor / product	Versions
IBM / Observability with Instana (Agent)	affected Build 1.0.303 through 1.0.320

CWE

CWE-1321

References

https://www.ibm.com/support/pages/node/7281349

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.