SUSE CVE-2026-81870

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

CVE-2026-81870

A flaw was found in OpenTelemetry-Go. The sdk/trace.NewTracerProvider component emits an internal Info-level diagnostic event that recursively includes span processor, exporter, and client configuration. If an application enables OpenTelemetry internal Info logging, a person or system with access...

CVE-2026-81870

OpenTelemetry-Go (versions 1.5.0–1.44.0) has an information-disclosure flaw in sdk/trace.NewTracerProvider. Its Info-level diagnostic event uses MarshalLog implementations that recursively include span processor, exporter, and client configuration. Applications that enable internal Info logging v...

PT-2026-94018

Name of the Vulnerable Software and Affected Versions OpenTelemetry-Go versions 1.5.0 through 1.44.0 Description When sdk/trace.NewTracerProvider constructs a provider, it records a TracerProvider created internal Info-level diagnostic event. In affected versions, the MarshalLog implementations...

CVE-2026-81870: Exposure of Sensitive Information to an Unauthorized Actor

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...