CVE-2026-44967— opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response
Possible ATT&CK Techniques 1AI
T1496 · Resource HijackingAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| open-telemetry | opentelemetry-cpp | < 1.27.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-44967
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response
Source: NVD (National Vulnerability Database)
Vulnerability Description
OpenTelemetry-cpp is the C++ implementation of OpenTelemetry. Prior to release 1.27.0, the OTLP HTTP exporters (traces/metrics/logs) read the full HTTP response into an in-memory vector of bytes without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is attacker-controlled (or a network attacker can MITM the exporter connection). This vulnerability is fixed in opentelemetry-cpp release 1.27.0.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
未经控制的内存分配
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenTelemetry C++ 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenTelemetry C++是OpenTelemetry团队的一款用于收集和导出遥测数据的服务器端支撑软件。 OpenTelemetry C++ 1.27.0之前版本存在资源管理错误漏洞，该漏洞源于OTLP HTTP导出器将完整的HTTP响应读入内存字节向量且无大小限制，可能导致在配置的收集器端点被攻击者控制时引发内存耗尽。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| open-telemetry | opentelemetry-cpp | < 1.27.0 | - |
II. Public POCs for CVE-2026-44967
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44967
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-44967 (1)
Vendor Advisories for CVE-2026-44967 (2)
Proof of Concept for CVE-2026-44967 (1)
IV. Related Vulnerabilities
Same vendor: open-telemetry
- CVE-2026-59892
OpenTelemetry JavaScript: Denial of service in `JaegerPropag - CVE-2026-54712
OpenTelemetry Javaagent RMI context propagation allows resou - CVE-2026-54704
OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentatio - CVE-2026-54285
opentelemetry-js: Unbounded memory allocation in W3C Baggage - CVE-2026-45287
OpenTelemetry-Go's Schema ParseFile leaks file descriptors o
Same weakness: CWE-789
- CVE-2026-59938
pypdf: Possible large memory usage for wrong image dimension - CVE-2026-15053
Tanium addressed a denial of service vulnerability in Tanium - CVE-2026-55079
Coder's unbounded memory allocation in provisioner file uplo - CVE-2026-55379
Pillow BdfFontFile`: `Image.new()` called without `_decompre - CVE-2026-55380
Pillow GdImageFile decompression bomb protection bypass
V. Comments for CVE-2026-44967
No comments yet