Skip to contentOpen-telemetry Opentelemetry-collector vulnerabilities
- open-telemetry github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver, opentelemetry-collector-contrib +1 moreOpenTelemetry githubreceiver silently ignores configured required_headers authenticationCVE-2026-55701Fix available6.9 Medium
- open-telemetry github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter, opentelemetry-collector-contrib +1 moreOpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer tokenCVE-2026-47256Fix available5.3 Medium
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreazureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replayCVE-2026-42602Fix available8.1 High
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreOpenTelemetry Collector AWS Firehose Receiver Authentication Bypass VulnerabilityCVE-2024-45043Fix available5.3 Medium
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreopen-telemetry has an Observable Timing DiscrepancyCVE-2024-42368Fix available6.5 Medium
- opentelemetry configgrpc, confighttp, opentelemetry +2 more +4 moreOpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPCCVE-2024-36129Fix available8.2 High