CVE-2022-23536

Cortex provides multi-tenant, long term storage for Prometheus. A local file inclusion vulnerability exists in Cortex versions 1.13.0, 1.13.1 and 1.14.0, where a malicious actor could remotely read local files as a result of parsing maliciously crafted Alertmanager configurations when submitted to the Alertmanager Set Configuration API. Only users of the Alertmanager service where `-experimental.alertmanager.enable-api` or `enable_api: true` is configured are affected. Affected Cortex users are advised to upgrade to patched versions 1.13.2 or 1.14.1. However as a workaround, Cortex administrators may reject Alertmanager configurations containing the `api_key_file` setting in the `opsgenie_configs` section before sending to the Set Alertmanager Configuration API.

• CWE-73
• CWE-184
• CWE-641

• https://cortexmetrics.io/docs/api/#set-alertmanager-configurationVendor Advisory
• https://github.com/cortexproject/cortex/releases/tag/v1.13.2Release Notes, Third Party Advisory
• https://github.com/cortexproject/cortex/releases/tag/v1.14.1Release Notes, Third Party Advisory
• https://github.com/cortexproject/cortex/security/advisories/GHSA-cq2g-pw6q-hf7jThird Party Advisory
• https://cortexmetrics.io/docs/api/#set-alertmanager-configurationVendor Advisory
• https://github.com/cortexproject/cortex/releases/tag/v1.13.2Release Notes, Third Party Advisory
• https://github.com/cortexproject/cortex/releases/tag/v1.14.1Release Notes, Third Party Advisory
• https://github.com/cortexproject/cortex/security/advisories/GHSA-cq2g-pw6q-hf7jThird Party Advisory

Published

Dec 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23529Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-2353Prior to microweber/microweber v1.2.20, due to improper neut…6.1
• CVE-2022-23530GuardDog is a CLI tool to identify malicious PyPI packages. …6.5
• CVE-2022-23531GuardDog is a CLI tool to identify malicious PyPI packages. …7.8
• CVE-2022-23532APOC (Awesome Procedures on Cypher) is an add-on library for…6.5
• CVE-2022-23535LiteDB is a small, fast and lightweight .NET NoSQL embedded …9.8
• CVE-2022-23537PJSIP is a free and open source multimedia communication lib…9.8
• CVE-2022-23538github.com/sylabs/scs-library-client is the Go client for th…7.6
• CVE-2022-23539Versions `<=8.5.1` of `jsonwebtoken` library could be miscon…8.1
• CVE-2022-2354The WP-DBManager WordPress plugin before 2.80.8 does not pre…7.2
• CVE-2022-23540In versions `<=8.5.1` of `jsonwebtoken` library, lack of alg…7.6
• CVE-2022-23541jsonwebtoken is an implementation of JSON Web Tokens. Versio…6.3