AIKIDO-2025-10923
github.com/influxdata/telegraf is vulnerable to External Control of System or Configuration Setting
18
Low Risk
This Affects:
github.com/influxdata/telegrafTL;DR
Affected versions of this package have a vulnerability that allows environment variables to be processed into raw configuration text without strict TOML enforcement. It can lead to unexpected type parsing and configuration manipulation. An attacker can manipulate these variables and inject malicious values, potentially bypassing security controls and altering Telegraf's configuration.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
github.com/influxdata/telegraf is vulnerable to External Control of System or Configuration Setting in versions 0.1.0 - 1.36.4.
How to fix this
Upgrade the github.com/influxdata/telegraf library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant