CVE-2026-54712
1 advisory.
Maven/io.opentelemetry.javaagent:opentelemetry-javaagent CVE-2026-54712: medium 5.3
OpenTelemetry Javaagent RMI context propagation allows resource exhaustion
Action: Upgrade io.opentelemetry.javaagent:opentelemetry-javaagent to 2.27.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.27.0 | - |
Fixed versions
| 2.27.0 |
Sources
- osv: GHSA-fq3f-m5qm-99f5
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/security/advisories/GHSA-fq3f-m5qm-99f5
- https://nvd.nist.gov/vuln/detail/CVE-2026-54712
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/pull/17870
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/commit/6ef18806d5daa4913619e4cb33d2d7ed6a853c22
- https://github.com/open-telemetry/opentelemetry-java-instrumentation
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v2.27.0
CVE-2026-54712 · published · modified · JSON