CVE-2026-81192
1 advisory.
NuGet/OpenTelemetry.Resources.Host CVE-2026-81192: high 7
OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
Action: Upgrade OpenTelemetry.Resources.Host to 1.16.0-beta.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.0-beta.2 | - |
Fixed versions
| 1.16.0-beta.2 |
Sources
- osv: GHSA-v8pv-4842-x354
- https://github.com/open-telemetry/opentelemetry-dotnet-contrib/security/advisories/GHSA-v8pv-4842-x354
- https://nvd.nist.gov/vuln/detail/CVE-2026-81192
- https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/1631
- https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/4760
- https://github.com/open-telemetry/opentelemetry-dotnet-contrib
CVE-2026-81192 · published · modified · JSON