CVE-2026-114603 | OpenTelemetry Python up to 1.45.0 TraceContextTextMapPropagator span.py TraceState.from_header resource consumption

October 22, 2026 Yanac

A vulnerability labeled as problematic has been found in OpenTelemetry Python up to 1.45.0. Affected by this issue is the function TraceState.from_header of the file opentelemetry/trace/span.py of the component TraceContextTextMapPropagator. The manipulation results in resource consumption.

This vulnerability is identified as CVE-2026-114603. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More