Skip to contentOpentelemetry Collector vulnerabilities
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreazureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replayCVE-2026-42602Fix available8.1 High
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreOpenTelemetry Collector AWS Firehose Receiver Authentication Bypass VulnerabilityCVE-2024-45043Fix available5.3 Medium
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreopen-telemetry has an Observable Timing DiscrepancyCVE-2024-42368Fix available6.5 Medium
- opentelemetry configgrpc, confighttp, opentelemetry +2 more +4 moreOpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPCCVE-2024-36129Fix available8.2 High