An information disclosure flaw in Chronosphere Chronocollector allows an unauthenticated attacker with network access to retrieve sensitive data. This vulnerability, classified as CWE‑497, permits direct exposure of confidential information without any credentials, potentially compromising confidentiality.

Palo Alto Networks Chronosphere Chronocollector is affected. All instances running before the recommended release of version 0.116.0 carry the vulnerability; versions 0.116.0 and later have the fix applied.

The CVSS score of 4.9 indicates a low‑to‑moderate severity for information disclosure. EPSS data is unavailable, but the vulnerability is not listed in CISA KEV, suggesting limited exploitation activity. The attack vector is network‑based and requires no authentication, meaning any host that can reach the collector service is a potential target. Exploitation is straightforward: an attacker simply accesses the service endpoints and extracts the exposed data.