Vulnerability-Lookup

CVE-2026-47256 (GCVE-0-2026-47256)

Vulnerability from cvelistv5 – Published: 2026-09-14 17:28 – Updated: 2026-09-14 18:00

Title

OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token

Summary

OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. Prior to 0.154.0, the Sentry exporter reads the remote OTLP sender-controlled service.name resource attribute in exporter/sentryexporter/sentry_exporter.go through extractProjectSlug and getOrCreateProjectEndpoint, passes the raw project slug to GetOTLPEndpoints and GetProjectKeys in exporter/sentryexporter/sentry_client.go, and interpolates it into a Sentry API URL without applying projectSlugRegexp through validateRoutingConfig at runtime in exporter/sentryexporter/config.go. Special characters can turn the expected path suffix into query data in all deployments or introduce slash and dot segments that traverse paths when the Sentry deployment normalizes them, while the Collector attaches its operator-configured bearer token to the request. A successful request can reach token-authorized administrative, organization, member, or key endpoints within the configured Sentry organization, and an attacker-controlled project slug can redirect subsequently exported telemetry. Sentry token middleware prevents cross-organization access. This issue is fixed in version 0.154.0.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-14 17:59 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/open-telemetry/opentelemetry-c…	x_refsource_CONFIRM
https://github.com/open-telemetry/opentelemetry-c…	x_refsource_MISC
https://github.com/open-telemetry/opentelemetry-c…	x_refsource_MISC

Impacted products

2 products

Vendor	Product	Version	CPE status
open-telemetry	opentelemetry-collector-contrib	Affected: < 0.154.0	guessed
open-telemetry	github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter	Affected: < 0.154.0	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-47256",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-14T17:59:46.221856Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-14T18:00:10.105Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "opentelemetry-collector-contrib",
          "vendor": "open-telemetry",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.154.0"
            }
          ]
        },
        {
          "product": "github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter",
          "vendor": "open-telemetry",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.154.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. Prior to 0.154.0, the Sentry exporter reads the remote OTLP sender-controlled service.name resource attribute in exporter/sentryexporter/sentry_exporter.go through extractProjectSlug and getOrCreateProjectEndpoint, passes the raw project slug to GetOTLPEndpoints and GetProjectKeys in exporter/sentryexporter/sentry_client.go, and interpolates it into a Sentry API URL without applying projectSlugRegexp through validateRoutingConfig at runtime in exporter/sentryexporter/config.go. Special characters can turn the expected path suffix into query data in all deployments or introduce slash and dot segments that traverse paths when the Sentry deployment normalizes them, while the Collector attaches its operator-configured bearer token to the request. A successful request can reach token-authorized administrative, organization, member, or key endpoints within the configured Sentry organization, and an attacker-controlled project slug can redirect subsequently exported telemetry. Sentry token middleware prevents cross-organization access. This issue is fixed in version 0.154.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-74",
              "description": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T17:28:15.068Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc"
        },
        {
          "name": "https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/3113638f216143f523b57f447728464337ae4903",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/3113638f216143f523b57f447728464337ae4903"
        },
        {
          "name": "https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.154.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.154.0"
        }
      ],
      "source": {
        "advisory": "GHSA-4jvg-4jfx-fmhc",
        "discovery": "UNKNOWN"
      },
      "title": "OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-47256",
    "datePublished": "2026-09-14T17:28:15.068Z",
    "dateReserved": "2026-05-18T23:03:37.228Z",
    "dateUpdated": "2026-09-14T18:00:10.105Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-47256",
      "date": "2026-09-23",
      "epss": "0.00416",
      "percentile": "0.3562"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "opentelemetry-collector-contrib",
                "vendor": "open-telemetry",
                "versions": [
                  {
                    "status": "affected",
                    "version": "\u003c 0.154.0"
                  }
                ]
              },
              {
                "product": "github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter",
                "vendor": "open-telemetry",
                "versions": [
                  {
                    "status": "affected",
                    "version": "\u003c 0.154.0"
                  }
                ]
              }
            ],
            "source": "security-advisories@github.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. Prior to 0.154.0, the Sentry exporter reads the remote OTLP sender-controlled service.name resource attribute in exporter/sentryexporter/sentry_exporter.go through extractProjectSlug and getOrCreateProjectEndpoint, passes the raw project slug to GetOTLPEndpoints and GetProjectKeys in exporter/sentryexporter/sentry_client.go, and interpolates it into a Sentry API URL without applying projectSlugRegexp through validateRoutingConfig at runtime in exporter/sentryexporter/config.go. Special characters can turn the expected path suffix into query data in all deployments or introduce slash and dot segments that traverse paths when the Sentry deployment normalizes them, while the Collector attaches its operator-configured bearer token to the request. A successful request can reach token-authorized administrative, organization, member, or key endpoints within the configured Sentry organization, and an attacker-controlled project slug can redirect subsequently exported telemetry. Sentry token middleware prevents cross-organization access. This issue is fixed in version 0.154.0."
          }
        ],
        "id": "CVE-2026-47256",
        "lastModified": "2026-09-14T19:17:22.573",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 1.4,
              "source": "security-advisories@github.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-47256",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-14T17:59:46.221856Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-09-14T18:17:48.250",
        "references": [
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/3113638f216143f523b57f447728464337ae4903"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.154.0"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc"
          }
        ],
        "sourceIdentifier": "security-advisories@github.com",
        "vulnStatus": "Received",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-22"
              },
              {
                "lang": "en",
                "value": "CWE-74"
              }
            ],
            "source": "security-advisories@github.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-21T11:42:33+00:00",
      "cve": "CVE-2026-47256",
      "id": "CVE-2026-47256",
      "initial_release_date": "2026-09-14T17:28:15.068000+00:00",
      "product_status:fixed": "3",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter: opentelemetry-collector-contrib: OpenTelemetry Sentry Exporter: Path traversal allows unauthorized access to Sentry API endpoints",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47256.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-15T02:04:08Z",
      "cve": "CVE-2026-47256",
      "id": "CVE-2026-47256",
      "initial_release_date": "2026-07-30T16:44:51Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-47256",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-47256.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-47256",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-14T17:59:46.221856Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-14T18:00:04.800Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "opentelemetry-collector-contrib",
              "vendor": "open-telemetry",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 0.154.0"
                }
              ]
            },
            {
              "product": "github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter",
              "vendor": "open-telemetry",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 0.154.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. Prior to 0.154.0, the Sentry exporter reads the remote OTLP sender-controlled service.name resource attribute in exporter/sentryexporter/sentry_exporter.go through extractProjectSlug and getOrCreateProjectEndpoint, passes the raw project slug to GetOTLPEndpoints and GetProjectKeys in exporter/sentryexporter/sentry_client.go, and interpolates it into a Sentry API URL without applying projectSlugRegexp through validateRoutingConfig at runtime in exporter/sentryexporter/config.go. Special characters can turn the expected path suffix into query data in all deployments or introduce slash and dot segments that traverse paths when the Sentry deployment normalizes them, while the Collector attaches its operator-configured bearer token to the request. A successful request can reach token-authorized administrative, organization, member, or key endpoints within the configured Sentry organization, and an attacker-controlled project slug can redirect subsequently exported telemetry. Sentry token middleware prevents cross-organization access. This issue is fixed in version 0.154.0."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-22",
                  "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-74",
                  "description": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-14T17:28:15.068Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc"
            },
            {
              "name": "https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/3113638f216143f523b57f447728464337ae4903",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/3113638f216143f523b57f447728464337ae4903"
            },
            {
              "name": "https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.154.0",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.154.0"
            }
          ],
          "source": {
            "advisory": "GHSA-4jvg-4jfx-fmhc",
            "discovery": "UNKNOWN"
          },
          "title": "OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-47256",
        "datePublished": "2026-09-14T17:28:15.068Z",
        "dateReserved": "2026-05-18T23:03:37.228Z",
        "dateUpdated": "2026-09-14T18:00:10.105Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-47256

Vulnerability from fkie_nvd - Published: 2026-09-14 18:17 - Updated: 2026-09-14 19:17

Severity

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

References

	URL	Tags
	security-advisories@github.com	https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/3113638f216143f523b57f447728464337ae4903
	security-advisories@github.com	https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.154.0
	security-advisories@github.com	https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc
	134c704f-9b21-4f2e-91b3-4a467353bcc0	https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "opentelemetry-collector-contrib",
          "vendor": "open-telemetry",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.154.0"
            }
          ]
        },
        {
          "product": "github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter",
          "vendor": "open-telemetry",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.154.0"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. Prior to 0.154.0, the Sentry exporter reads the remote OTLP sender-controlled service.name resource attribute in exporter/sentryexporter/sentry_exporter.go through extractProjectSlug and getOrCreateProjectEndpoint, passes the raw project slug to GetOTLPEndpoints and GetProjectKeys in exporter/sentryexporter/sentry_client.go, and interpolates it into a Sentry API URL without applying projectSlugRegexp through validateRoutingConfig at runtime in exporter/sentryexporter/config.go. Special characters can turn the expected path suffix into query data in all deployments or introduce slash and dot segments that traverse paths when the Sentry deployment normalizes them, while the Collector attaches its operator-configured bearer token to the request. A successful request can reach token-authorized administrative, organization, member, or key endpoints within the configured Sentry organization, and an attacker-controlled project slug can redirect subsequently exported telemetry. Sentry token middleware prevents cross-organization access. This issue is fixed in version 0.154.0."
    }
  ],
  "id": "CVE-2026-47256",
  "lastModified": "2026-09-14T19:17:22.573",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-47256",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-09-14T17:59:46.221856Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-09-14T18:17:48.250",
  "references": [
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/3113638f216143f523b57f447728464337ae4903"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.154.0"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        },
        {
          "lang": "en",
          "value": "CWE-74"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

GHSA-4JVG-4JFX-FMHC

Vulnerability from github – Published: 2026-06-18 15:04 – Updated: 2026-06-18 15:04

Summary

opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token

Details

Summary

The Sentry exporter constructs Sentry API URLs by interpolating the span's service.name resource attribute into the URL path without validation. Because service.name is controlled by remote OTLP senders and the operator-configured bearer token is attached to every request, a crafted service name can reach arbitrary Sentry API endpoints reachable by that token — including privileged admin, organization, and member endpoints within the configured Sentry organization.

Affected

exporter/sentryexporter/sentry_exporter.go (lines 715–737) — extractProjectSlug returns the attacker-controlled service.name directly as the slug.
exporter/sentryexporter/sentry_exporter.go (lines 745–809) — getOrCreateProjectEndpoint passes the raw slug to GetOTLPEndpoints at line 761.
exporter/sentryexporter/sentry_client.go (lines 190–244) — GetProjectKeys interpolates the slug into fmt.Sprintf URL path and attaches the operator bearer token on line 207.
exporter/sentryexporter/sentry_client.go (lines 327–363) — GetOTLPEndpoints calls GetProjectKeys on line 329 with the raw slug.
exporter/sentryexporter/config.go (lines 55–108) — projectSlugRegexp is applied only to operator config mappings inside validateRoutingConfig, never to
runtime-derived slugs.

Root cause

extractProjectSlug (sentry_exporter.go:715–737) reads service.name from pcommon.Resource.Attributes() without schema validation and returns the raw
string on line 736.
GetProjectKeys (sentry_client.go:192) calls fmt.Sprintf("%s/api/0/projects/%s/%s/keys/", c.baseURL, orgSlug, projectSlug). The slug is treated as a single path segment but no validation is performed.
projectSlugRegexp (config.go:58) — defined as ^[a-z0-9_-]{1,50}$ — is referenced only inside validateRoutingConfig on line 98 (config-time only). No runtime callsite exists.
Go net/http preserves literal .. and / characters in URL paths when constructed via fmt.Sprintf.
The operator-configured DSN / bearer token is attached unconditionally to every outbound request (sentry_client.go:207): req.Header.Set("Authorization", fmt.Sprintf("Bearer %s", c.authToken)).

Exploitation

Primary: query-string injection (reliable across all deployments)

Attacker emits service.name = "foo?injected_query=".

URL becomes https://sentry.io/api/0/projects/ORG-SLUG/foo?injected_query=/keys/.

The trailing /keys/ is consumed as part of the query string. The resource endpoint is /api/0/projects/ORG-SLUG/foo. The attacker can reach any GET-based Sentry API endpoint reachable by the bearer token. This vector is not dependent on server-side path normalization and works in all deployment
configurations.

Secondary: path traversal (nginx-dependent)

Attacker emits a span with service.name = "foo/../../members".

Resulting URL: https://sentry.io/api/0/projects/ORG-SLUG/foo/../../members/keys/

After server-side normalization (nginx resolves .. segments): https://sentry.io/api/0/projects/ORG-SLUG/members/keys/

The operator bearer token authenticates the request. Effectiveness depends on whether the Sentry deployment normalizes .. segments before routing (standard nginx behaviour).

Amplified: telemetry redirect for data exfiltration

Attacker-owned Sentry project slug → span data for other applications is exported to an attacker-controlled Sentry project, leaking operational telemetry.
The collector fetches the DSN/keys for the attacker's slug and subsequently forwards legitimate traces/logs to the attacker-controlled destination.

Threat model

Attacker capabilities: remote OTLP trace sender (application-level span emission).
Operator capabilities: configures Sentry DSN, bearer token, base URL; sets up receiver pipeline.
The attacker does NOT control operator YAML. The attacker DOES control resource attribute values on spans they emit.

Realistic deployment

Kubernetes cluster with OpenTelemetry Collector forwarding traces from multiple applications to Sentry SaaS or self-hosted Sentry.
One compromised or malicious application reaches the collector via OTLP.
The collector is configured with a valid Sentry bearer token for the organization.

Remediation

Apply the existing projectSlugRegexp to runtime-derived slugs, not only to operator config mappings: ```
import "regexp"

var runtimeSlugPattern = regexp.MustCompile(^[a-zA-Z0-9_-]+$)

func (s *endpointState) extractProjectSlug(attrs pcommon.Map) string { attrValue, exists := attrs.Get(s.attributeKey)
if !exists || attrValue.Type() != pcommon.ValueTypeStr { return ""
}
serviceName := attrValue.Str()
if serviceName == "" { return ""
}
if s.projectMapping != nil { if mappedSlug, ok := s.projectMapping[serviceName]; ok {
return mappedSlug }
}
if !runtimeSlugPattern.MatchString(serviceName) { return "" // reject; drop the span or use a fallback default project } return serviceName
}

Alternatively, reject at URL construction:

func (c *sentryClient) GetProjectKeys(ctx context.Context, orgSlug, projectSlug string) ([]projectKey, error) { if !runtimeSlugPattern.MatchString(projectSlug) {
return nil, fmt.Errorf("invalid project slug: %q", projectSlug) }
baseURL := fmt.Sprintf("%s/api/0/projects/%s/%s/keys/", c.baseURL, orgSlug, projectSlug) // ...
}
```
Apply the runtime regex to ALL slug-derived URL components (including orgSlug if it can ever be attacker-influenced), not just to config-time validation.

Credit

Reported by independent security research by Martin Brodeur.

Severity

5.3 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.154.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-47256"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22",
      "CWE-74"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-06-18T15:04:10Z",
    "nvd_published_at": null,
    "severity": "MODERATE"
  },
  "details": "Summary               \n         \n  The Sentry exporter constructs Sentry API URLs by interpolating the span\u0027s service.name resource attribute into the URL path without validation. Because\n  service.name is controlled by remote OTLP senders and the operator-configured bearer token is attached to every request, a crafted service name can reach\n  arbitrary Sentry API endpoints reachable by that token \u2014 including privileged admin, organization, and member endpoints within the configured Sentry\n  organization.                                                                                                                                               \n                                          \n  Affected                                                                                                                                                    \n                                                                                                                                                              \n  - exporter/sentryexporter/sentry_exporter.go (lines 715\u2013737) \u2014 extractProjectSlug returns the attacker-controlled service.name directly as the slug.        \n  - exporter/sentryexporter/sentry_exporter.go (lines 745\u2013809) \u2014 getOrCreateProjectEndpoint passes the raw slug to GetOTLPEndpoints at line 761.              \n  - exporter/sentryexporter/sentry_client.go (lines 190\u2013244) \u2014 GetProjectKeys interpolates the slug into fmt.Sprintf URL path and attaches the operator bearer\n   token on line 207.                                                                                                                                         \n  - exporter/sentryexporter/sentry_client.go (lines 327\u2013363) \u2014 GetOTLPEndpoints calls GetProjectKeys on line 329 with the raw slug.\n  - exporter/sentryexporter/config.go (lines 55\u2013108) \u2014 projectSlugRegexp is applied only to operator config mappings inside validateRoutingConfig, never to   \n  runtime-derived slugs.                                                                                                                                      \n                                                                                                                                                              \n  Root cause                                                                                                                                                  \n                                                                                                                                                              \n  1. extractProjectSlug (sentry_exporter.go:715\u2013737) reads service.name from pcommon.Resource.Attributes() without schema validation and returns the raw      \n  string on line 736.                                                                                                                                         \n  2. GetProjectKeys (sentry_client.go:192) calls fmt.Sprintf(\"%s/api/0/projects/%s/%s/keys/\", c.baseURL, orgSlug, projectSlug). The slug is treated as a\n  single path segment but no validation is performed.                                                                                                         \n  3. projectSlugRegexp (config.go:58) \u2014 defined as ^[a-z0-9_-]{1,50}$ \u2014 is referenced only inside validateRoutingConfig on line 98 (config-time only). No\n  runtime callsite exists.                                                                                                                                    \n  4. Go net/http preserves literal .. and / characters in URL paths when constructed via fmt.Sprintf.                                                         \n  5. The operator-configured DSN / bearer token is attached unconditionally to every outbound request (sentry_client.go:207): req.Header.Set(\"Authorization\", \n  fmt.Sprintf(\"Bearer %s\", c.authToken)).                                                                                                                     \n                                            \n  Exploitation                                                                                                                                                \n                                                                                                                                                              \n  Primary: query-string injection (reliable across all deployments)                                                                                           \n                                                                                                                                                              \n  Attacker emits service.name = \"foo?injected_query=\".\n                                                                                                                                                              \n  URL becomes https://sentry.io/api/0/projects/ORG-SLUG/foo?injected_query=/keys/.\n                                                                                                                                                              \n  The trailing /keys/ is consumed as part of the query string. The resource endpoint is /api/0/projects/ORG-SLUG/foo. The attacker can reach any GET-based\n  Sentry API endpoint reachable by the bearer token. This vector is not dependent on server-side path normalization and works in all deployment               \n  configurations.                           \n                                                                                                                                                              \n  Secondary: path traversal (nginx-dependent)\n                                                                                                                                                              \n  Attacker emits a span with service.name = \"foo/../../members\".\n                                          \n  Resulting URL: https://sentry.io/api/0/projects/ORG-SLUG/foo/../../members/keys/\n                                                                                                                                                              \n  After server-side normalization (nginx resolves .. segments): https://sentry.io/api/0/projects/ORG-SLUG/members/keys/\n                                                                                                                                                              \n  The operator bearer token authenticates the request. Effectiveness depends on whether the Sentry deployment normalizes .. segments before routing (standard\n  nginx behaviour).                                                                                                                                           \n                                            \n  Amplified: telemetry redirect for data exfiltration                                                                                                         \n                                            \n  Attacker-owned Sentry project slug \u2192 span data for other applications is exported to an attacker-controlled Sentry project, leaking operational telemetry.  \n  The collector fetches the DSN/keys for the attacker\u0027s slug and subsequently forwards legitimate traces/logs to the attacker-controlled destination.         \n   \n  Threat model                                                                                                                                                \n                                            \n  - Attacker capabilities: remote OTLP trace sender (application-level span emission).                                                                        \n  - Operator capabilities: configures Sentry DSN, bearer token, base URL; sets up receiver pipeline.\n  - The attacker does NOT control operator YAML. The attacker DOES control resource attribute values on spans they emit.\n                                          \n  Realistic deployment\n                                                                                                                                                              \n  - Kubernetes cluster with OpenTelemetry Collector forwarding traces from multiple applications to Sentry SaaS or self-hosted Sentry.\n  - One compromised or malicious application reaches the collector via OTLP.                                                                                  \n  - The collector is configured with a valid Sentry bearer token for the organization.\n\n                                                                                                                                                              \n  Remediation\n                                                                                                                                                              \n  Apply the existing projectSlugRegexp to runtime-derived slugs, not only to operator config mappings:\n  ```                                                                                                                                                            \n  import \"regexp\"                           \n\n  var runtimeSlugPattern = regexp.MustCompile(`^[a-zA-Z0-9_-]+$`)\n                                          \n  func (s *endpointState) extractProjectSlug(attrs pcommon.Map) string {\n      attrValue, exists := attrs.Get(s.attributeKey)                                                                                                          \n      if !exists || attrValue.Type() != pcommon.ValueTypeStr {\n          return \"\"                                                                                                                                           \n      }                                     \n      serviceName := attrValue.Str()                                                                                                                          \n      if serviceName == \"\" {\n          return \"\"                                                                                                                                           \n      }                                     \n      if s.projectMapping != nil {\n          if mappedSlug, ok := s.projectMapping[serviceName]; ok {                                                                                            \n              return mappedSlug\n          }                                                                                                                                                   \n      }                                     \n      if !runtimeSlugPattern.MatchString(serviceName) {\n          return \"\" // reject; drop the span or use a fallback default project\n      }\n      return serviceName                                                                                                                                      \n  }\n                                                                                                                                                              \n  Alternatively, reject at URL construction:  \n                                          \n  func (c *sentryClient) GetProjectKeys(ctx context.Context, orgSlug, projectSlug string) ([]projectKey, error) {\n      if !runtimeSlugPattern.MatchString(projectSlug) {                                                                                                       \n          return nil, fmt.Errorf(\"invalid project slug: %q\", projectSlug)\n      }                                                                                                                                                       \n      baseURL := fmt.Sprintf(\"%s/api/0/projects/%s/%s/keys/\", c.baseURL, orgSlug, projectSlug)\n      // ...                                                                                                                                                  \n  }                                       \n```                                                                                                                                                              \n  Apply the runtime regex to ALL slug-derived URL components (including orgSlug if it can ever be attacker-influenced), not just to config-time validation.   \n   \n  Credit                                                                                                                                                      \n                                            \n  Reported by independent security research by Martin Brodeur.",
  "id": "GHSA-4jvg-4jfx-fmhc",
  "modified": "2026-06-18T15:04:10Z",
  "published": "2026-06-18T15:04:10Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token"
}

RHSA-2026:63152

Vulnerability from csaf_redhat - Published: 2026-09-03 11:32 - Updated: 2026-09-21 11:42

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2026-47256.

CVE-2026-47256

A flaw was found in the OpenTelemetry Sentry exporter. A remote attacker can exploit a path traversal vulnerability by manipulating the `service.name` attribute. This allows the attacker to craft malicious Sentry API URLs, potentially gaining unauthorized access to sensitive administrative or organization-level endpoints within the configured Sentry organization. Additionally, an attacker could redirect telemetry data, impacting data integrity and confidentiality.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Fixed: 3 products

https://access.redhat.com/errata/RHSA-2026:63152

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-47256 (GCVE-0-2026-47256)

FKIE_CVE-2026-47256

GHSA-4JVG-4JFX-FMHC

RHSA-2026:63152

Tags

Sightings

Nomenclature

Related by attack behaviour