CVE-2026-128085 | open-telemetry opentelemetry-go up to 1.46.0 Attribute Normalization sdk/internal/attrnorm allocation of resources

November 13, 2026 Yanac

A vulnerability categorized as problematic has been discovered in open-telemetry opentelemetry-go up to 1.46.0. This impacts an unknown function of the file sdk/internal/attrnorm of the component Attribute Normalization. Such manipulation leads to allocation of resources.

This vulnerability is referenced as CVE-2026-128085. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More