CVE-2026-81871
MediumAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 172
- of 17,803 indexed, latest versions
- Container images
- 158
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning
Carried by container images the latest versions of 172 of 17,803 indexed charts deploy, on 158 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v0.8.0, v0.9.0, v0.10.0, v0.11.0+9 more | 0.21.0 | 158 |
- OSV records
- GHSA-w34q-cm8f-9c5x
- Trending
- Rank 45 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
172 by stars
Container images carrying it
158 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| otel/ | 1e45d9483faa | go.opentelemetry.io/ | 0.21.0 | 1 |
| percona/ | 003f9c25f842 | go.opentelemetry.io/ | 0.21.0 | 1 |
| pipekit13/ | b969a930b439 | go.opentelemetry.io/ | 0.21.0 | 1 |
| posit/ | 527493ef621b | go.opentelemetry.io/ | 0.21.0 | 1 |
| pulumi/ | 6fca5e82daf8 | go.opentelemetry.io/ | 0.21.0 | 1 |
| robiningelbrecht/ | 40842cdfd616 | go.opentelemetry.io/ | 0.21.0 | 1 |
| rotationalio/ | f8d8b694515a | go.opentelemetry.io/ | 0.21.0 | 1 |
| semaphoreui/ | 3996804607eb | go.opentelemetry.io/ | 0.21.0 | 1 |
| semaphoreui/ | 98ad9bc7a2a0 | go.opentelemetry.io/ | 0.21.0 | 1 |
| semaphoreui/ | e9260bfa8255 | go.opentelemetry.io/ | 0.21.0 | 1 |
| signoz/ | 49501b04d77a | go.opentelemetry.io/ | 0.21.0 | 1 |
| signoz/ | 34ecb436b687 | go.opentelemetry.io/ | 0.21.0 | 1 |
| solarwinds/ | 3c1110e8bdfb | go.opentelemetry.io/ | 0.21.0 | 1 |
| superseriousbusiness/ | 0078ca451dda | go.opentelemetry.io/ | 0.21.0 | 1 |
| sysadminsmedia/ | 56e880b62309 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 16759fa523f8 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 54a193b757da | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 896e4926e0d7 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 6d650f4bd6ac | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | a8c8297c7274 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 0edfc075277b | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | e2443833726a | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 4ba3adf47f5c | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | d353720b037a | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | bdb8f3ee121d | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 878a55478c17 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 0cca6760763a | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | ef92da4621e6 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | ff23f452813a | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 32234e63c1d0 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 2434560e8f0e | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 278aff685646 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 590e50477b76 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 5e331c925091 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 79b81912f1fb | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 89490ef63b72 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 45bdeaf3fcd6 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 73689c430946 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | eae5cdbf5e5d | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 01392fba6bc8 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | d1ef79b3cad7 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 8f53a49c305e | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 5e8a23b83f30 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 16e68b966ff9 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 01b2e1d1f3ef | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | a638fab43e62 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 511231955463 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | b044edd23888 | go.opentelemetry.io/ | 0.21.0 | 1 |
| ghcr.io/ | 66d353e7693f | go.opentelemetry.io/ | 0.21.0 | 1 |
| public.ecr.aws/ | d2bdfff2c377 | go.opentelemetry.io/ | 0.21.0 | 1 |