StackRadar

CVE-2026-81871

Medium

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
172
of 17,803 indexed, latest versions
Container images
158
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning

Carried by container images the latest versions of 172 of 17,803 indexed charts deploy, on 158 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpcgolangv0.8.0, v0.9.0, v0.10.0, v0.11.0+9 more0.21.0158
OSV records
GHSA-w34q-cm8f-9c5x
Trending
Rank 45 in indexed charts, since 18 Sept 2026. See the ranking →

Charts affected

172 by stars
ChartLatestAffected imagesRadar Score
monitoringrocketchat-server0.0.172 of 9See more

monitoring rocketchat-server 0.0.17

2 of the 9 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/loki:3.6.3cd6e176883a9
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.12.2
0.21.0
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.14.0
0.21.0

Open the chart page →

7,044
jaegerromanow-helm-chartsVerified publisher1.7.31 of 1See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.9.0e128b9adbb29
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.13.0
0.21.0

Open the chart page →

1,623
caddy-reverse-proxyromholdings0.10.11 of 1See more

caddy-reverse-proxy romholdings 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
library/caddy:latestdf7f1c2fb114
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0

Open the chart page →

863
beaconrotationalVerified publisher0.2.01 of 1See more

beacon rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
rotationalio/beacon:0.2.0f8d8b694515a
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0

Open the chart page →

1,011
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0

Open the chart page →

7,759
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.153.06ed874ea083d
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0

Open the chart page →

3,818
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0

Open the chart page →

12,826
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.12.2
0.21.0

Open the chart page →

1,829
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.12.2
0.21.0

Open the chart page →

827
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.12.2
0.21.0

Open the chart page →

2,286
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.13.0
0.21.0

Open the chart page →

948
semaphoresemaphore-light1.0.01 of 1See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
semaphoreui/semaphore:latest3996804607eb
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.14.0
0.21.0

Open the chart page →

1,867
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.12.2
0.21.0

Open the chart page →

7,740
ctlog-tilessigstoreVerified publisher0.1.71 of 1See more

ctlog-tiles sigstore 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
ghcr.io/transparency-dev/tesseract/posix:v0.1.2b044edd23888
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.20.0
0.21.0

Open the chart page →

280
kube-prometheus-stacksoftonic81.5.11 of 6See more

kube-prometheus-stack softonic 81.5.1

1 of the 6 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.12.2
0.21.0

Open the chart page →

5,017
stunner-prometheusstunner0.2.11 of 4See more

stunner-prometheus stunner 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0

Open the chart page →

3,064
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0

Open the chart page →

7,076
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.12.2
0.21.0

Open the chart page →

4,578
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0

Open the chart page →

1,953
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.8.0
0.21.0

Open the chart page →

1,357
xboardxboard0.2.01 of 1See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
ghcr.io/cedar2025/xboard:latest896e4926e0d7
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0

Open the chart page →

1,060
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-81871.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0

Open the chart page →

936

Container images carrying it

158 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.14.0
0.21.0
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.10.252281db48c93
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.20.0
0.21.0
1
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0
1
quay.io/opstree/grafana:12.4.3b61c1ed2f015
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.12.2
0.21.0
1
quay.io/opstree/loki:3.6-debian13bdfee214c7ea
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.12.2
0.21.0
1
quay.io/opstree/opentelemetry-operator:0.149.0-debian13a21405ab9a9a
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
0.21.0
1
quay.io/opstree/tempo:2.10.4-debian13cb734024b3fd
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.14.0
0.21.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.18.0
0.21.0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.