VDB
CVE-2026-81870
CVE-2026-81870
PUBLISHED
CVSS 3.299999952316284 LOW
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
EPSS 0.27% · 18.5th percentile
Risk Scores
CVSS 3.1
3.299999952316284
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.27%
18.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | cloud-provider-aws-fips-1.34 | 0 |
| wolfi | datadog-operator | 0 |
| chainguard | terraform-1.15 | 0 |
| chainguard | grype-db | 0 |
| chainguard | gitness | 0 |
| chainguard | witness | 0 |
| chainguard | azurefile-csi-1.34 | 0 |
| chainguard | crossplane-provider-keycloak | 0 |
| chainguard | multicluster-controlplane | 0 |
| chainguard | tetragon | 0 |
| chainguard | cephcsi | 0 |
| wolfi | cluster-api-gcp-controller | 0 |
| chainguard | kubescape-server-fips | 0 |
| chainguard | fluent-operator-fips | 0 |
| chainguard | frankenphp-8.4 | 0 |
| wolfi | timestamp-authority | 0 |
| chainguard | kubernetes-csi-external-snapshotter-8.2 | 0 |
| chainguard | jitsucom-bulker | 0 |
| wolfi | kuma-2.13 | 0 |
| chainguard | containerd-2.2 | 0 |
…and 1687 more
Timeline
- Sep 16, 2026 Coalition ESS Score
- Sep 16, 2026 CVE Published
- Sep 17, 2026 EPSS Score
- Sep 24, 2026 EPSS Score
- Sep 26, 2026 EPSS Score
- Oct 6, 2026 EPSS Score
- Oct 13, 2026 EPSS Score
- Oct 19, 2026 EPSS Score
- Oct 25, 2026 EPSS Score
- Oct 29, 2026 EPSS Score
- Oct 31, 2026 Security Advisory
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-81870 advisory
- https://github.com/advisories/GHSA-8wmf-6v46-5gfg advisory
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg url
- https://github.com/open-telemetry/opentelemetry-go/pull/8438 patch
- https://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38 patch
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0 url
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0 url