CVE-2023-36812

CVE-2023-36812 is a critical Remote Code Execution (RCE) vulnerability affecting OpenTSDB, an open-source Time Series Database. The vulnerability allows an unauthenticated attacker to inject malicious commands into Gnuplot configuration files, leading to arbitrary code execution. With a CVSS score of 9.8 (CRITICAL), this flaw presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Metasploit module exists for exploitation, and the vulnerability has a high EPSS score, indicating a significant likelihood of future exploitation despite limited public discussion or media coverage.