CVE-2026-81871
MediumAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 172
- of 17,803 indexed, latest versions
- Container images
- 158
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning
Carried by container images the latest versions of 172 of 17,803 indexed charts deploy, on 158 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.opentelemetry.io/ | v0.8.0, v0.9.0, v0.10.0, v0.11.0+9 more | 0.21.0 | 158 |
- OSV records
- GHSA-w34q-cm8f-9c5x
- Trending
- Rank 45 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
172 by stars
Container images carrying it
158 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | f772d434e8fa | go.opentelemetry.io/ | 0.21.0 | 12 |
| ghcr.io/ | 3ccc56791c8a | go.opentelemetry.io/ | 0.21.0 | 6 |
| grafana/ | 121a7a9ece6d | go.opentelemetry.io/ | 0.21.0 | 4 |
| grafana/ | 69a5d2d957ca | go.opentelemetry.io/ | 0.21.0 | 4 |
| grafana/ | 3c8fd3570dd9 | go.opentelemetry.io/ | 0.21.0 | 4 |
| grafana/ | 65a578975943 | go.opentelemetry.io/ | 0.21.0 | 4 |
| library/ | 1be55279f18a | go.opentelemetry.io/ | 0.21.0 | 4 |
| grafana/ | 3600073f45a9 | go.opentelemetry.io/ | 0.21.0 | 3 |
| grafana/ | 7cb8c64c4d57 | go.opentelemetry.io/ | 0.21.0 | 3 |
| grafana/ | d70e4659623f | go.opentelemetry.io/ | 0.21.0 | 3 |
| grafana/ | 0dac7d5cb383 | go.opentelemetry.io/ | 0.21.0 | 3 |
| mcp/ | 9362bcf6aa0e | go.opentelemetry.io/ | 0.21.0 | 3 |
| ghcr.io/ | 0c6994bb4c5a | go.opentelemetry.io/ | 0.21.0 | 3 |
| dunglas/ | 916834e49961 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 7790f6f7fbd8 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | f94b1c82957a | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 2175aaa91c96 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 9e1e77ade304 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | e932bd6ed0e0 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 44148ad243c0 | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | 736f7459913d | go.opentelemetry.io/ | 0.21.0 | 2 |
| grafana/ | f0561deb1c68 | go.opentelemetry.io/ | 0.21.0 | 2 |
| library/ | 5f5c8640aae0 | go.opentelemetry.io/ | 0.21.0 | 2 |
| library/ | df7f1c2fb114 | go.opentelemetry.io/ | 0.21.0 | 2 |
| library/ | 6b9cbca6fac4 | go.opentelemetry.io/ | 0.21.0 | 2 |
| library/ | f86a2cab1b5c | go.opentelemetry.io/ | 0.21.0 | 2 |
| otel/ | 125bdbeb7590 | go.opentelemetry.io/ | 0.21.0 | 2 |
| ghcr.io/ | 6b69512c00dc | go.opentelemetry.io/ | 0.21.0 | 2 |
| ghcr.io/ | 97bbf905a6c1 | go.opentelemetry.io/ | 0.21.0 | 2 |
| ghcr.io/ | 9e889ec33f96 | go.opentelemetry.io/ | 0.21.0 | 2 |
| public.ecr.aws/ | 18cae836e9c7 | go.opentelemetry.io/ | 0.21.0 | 2 |
| aapjeisbaas/ | 6b261abc7fb0 | go.opentelemetry.io/ | 0.21.0 | 1 |
| akeyless/ | d4768a9b089c | go.opentelemetry.io/ | 0.21.0 | 1 |
| amazon/ | 9dea6643715a | go.opentelemetry.io/ | 0.21.0 | 1 |
| checkmk/ | c11b422210c4 | go.opentelemetry.io/ | 0.21.0 | 1 |
| distribution/ | bca24727f400 | go.opentelemetry.io/ | 0.21.0 | 1 |
| falcosecurity/ | 1976da721518 | go.opentelemetry.io/ | 0.21.0 | 1 |
| foomo/ | 824f41463e9b | go.opentelemetry.io/ | 0.21.0 | 1 |
| gotenberg/ | 206a6c708fc6 | go.opentelemetry.io/ | 0.21.0 | 1 |
| gotenberg/ | 67097317623a | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 0f4434c92b3e | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 491b0578c049 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 84b76d56c594 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 8c7256f412fe | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | b8ec653c4423 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | f50931848bd8 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 0f86bada30d6 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 2d1f9ae67c17 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 2ebef928d7e5 | go.opentelemetry.io/ | 0.21.0 | 1 |
| grafana/ | 35c41e0fd029 | go.opentelemetry.io/ | 0.21.0 | 1 |