Open-Feature

3 CVEs across 2 Open-Feature products. Browse Open-Feature vulnerabilities, severities, and proof-of-concept exploits.

Open-Feature products with known CVEs

ProductCVEs
Open-Feature-Operator2
Flagd1
Open-Feature CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54495Medium4.32026-09-17The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workloa…
CVE-2026-31866High7.52026-03-11flagd is a feature flag daemon with a Unix philosophy. Prior to 0.14.2, flagd exposes OFREP (/ofrep/v1/evaluate/...) and gRPC (evaluation.v1, evaluation.v2) en…
CVE-2023-29018High8.02023-04-14The OpenFeature Operator allows users to expose feature flags to applications. Assuming the pre-existence of a vulnerability that allows for arbitrary code exe…