CVE-2026-112006 | OpenTelemetry opentelemetry-exporter-otlp-proto-http up to 1.44.x OTEL_EXPORTER_OTLP_CERTIFICATE certificate validation

October 18, 2026 Yanac

A vulnerability labeled as problematic has been found in OpenTelemetry opentelemetry-exporter-otlp-proto-http up to 1.44.x. Affected by this vulnerability is an unknown functionality. Such manipulation of the argument OTEL_EXPORTER_OTLP_CERTIFICATE leads to improper certificate validation.

This vulnerability is listed as CVE-2026-112006. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More