CVE-2026-47701

2 advisories.

Go/github.com/open-telemetry/opentelemetry-operator CVE-2026-47701: high 7.7, EPSS 0.46%

OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

Action: Upgrade github.com/open-telemetry/opentelemetry-operator to 0.152.0 or later.

go get github.com/open-telemetry/opentelemetry-operator@v0.152.0

Affected

introduced	fixed	last affected
0	0.152.0	-

Fixed versions

0.152.0

Sources

CVE-2026-47701 · published 2026-06-10T17:24:01Z · modified 2026-09-10T03:51:08.687091913Z · JSON

Go/github.com/open-telemetry/opentelemetry-operator CVE-2026-47701: unknown, EPSS 0.46%

OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth in github.com/open-telemetry/opentelemetry-operator

Action: Upgrade github.com/open-telemetry/opentelemetry-operator to 0.152.0 or later.

go get github.com/open-telemetry/opentelemetry-operator@v0.152.0

Affected

introduced	fixed	last affected
0	0.152.0	-

Fixed versions

0.152.0

Sources

CVE-2026-47701 · published 2026-06-25T18:43:19Z · modified 2026-06-25T19:45:31.867709302Z · JSON