CVE-2026-54712

The CVE pertains to OpenTelemetry Java Instrumentation . In versions prior to 2.27.0 , the RMI context propagation payload reader limits the number of context entries but not the aggregate size of the strings, allowing an attacker who can reach an RMI endpoint on an instrumented JVM to send an ov...