linuxfoundation opentelemetry instrumentation for java vulnerabilities (CVE)

CVE records published for linuxfoundation opentelemetry instrumentation for java, newest first. Follow to get an email when a new one appears.

3 results
9.3Critical
CVE-2026-33701

OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution

open-telemetry opentelemetry-java-instrumentation; Red Hat Red Hat JBoss Enterprise Application Platform 8; Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.26.1, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serializa…