CVE-2024-24830

CVE-2024-24830 is an unauthorized privilege escalation vulnerability affecting OpenObserve versions prior to 0.8.0. An authenticated regular user can exploit the /api/{org_id}/users endpoint to create new users with elevated privileges, including the 'root' role, by manipulating the user creation payload. This vulnerability has a CVSS score of 8.8 (High), indicating a network-based attack with low complexity, requiring only low privileges, and leading to high impacts on confidentiality, integrity, and availability. There is currently no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.