What’s Vulnerable › Products
open-telemetry opentelemetry-collector-contrib vulnerabilities
5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your open-telemetry opentelemetry-collector-contrib version is affected
Latest open-telemetry opentelemetry-collector-contrib vulnerabilities
- CVE-2026-55701 — OpenTelemetry githubreceiver silently ignores configured required_headers authentication (CVSS 6.9)
- CVE-2026-47256 — OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token (CVSS 5.3)
- CVE-2026-42602 — azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay (CVSS 8.1)
- CVE-2024-45043 — OpenTelemetry Collector AWS Firehose Receiver Authentication Bypass Vulnerability (CVSS 5.3)
- CVE-2024-42368 — open-telemetry has an Observable Timing Discrepancy (CVSS 6.5)