Vulnerabilidades de open-telemetry opentelemetry-java-instrumentation (CVE)

Registros CVE publicados para open-telemetry opentelemetry-java-instrumentation, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
9.3Crítica
CVE-2026-33701

OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution

open-telemetry opentelemetry-java-instrumentation; Red Hat Red Hat JBoss Enterprise Application Platform 8; Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.26.1, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serializa…