Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
OpenTelemetry Collector may expose message data
published 4 days ago
Summary
The OpenTelemetry Collector component from cleanstart can be tricked into handling messages from RabbitMQ in a way that reveals internal information. This could allow an attacker to see data that should stay private. Update the collector to the latest version or apply the vendor’s recommended configuration changes to stop the issue.
What to do
- Update cleanstart opentelemetry-collector-contrib to version 0.159.0-r4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | opentelemetry-collector-contrib |
< 0.159.0-r4 Fix: upgrade to 0.159.0-r4
|
Original advisory text
RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLEANSTART-2026-VZ69242 · OSV
Track software like this
Free during beta