Skip to main content
Griffin Technology PartnersGTP
LowCVE-2026-81870active

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Published September 19, 2026Updated September 24, 2026

Source data

Overview

The source does not supply a plain-text overview. Review the authoritative advisory for the full description.

Impact & technical details

A separate impact classification is not supplied in this record. See the source advisory.

CVSS base score
Not supplied

Affected products

  • azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0
  • azl3 azurelinux-image-tools 1.6.0-3 on Azure Linux 3.0
  • azl3 cert-manager 1.12.15-12 on Azure Linux 3.0
  • azl3 cert-manager 1.12.15-14 on Azure Linux 3.0
  • azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0
  • azl3 cloud-provider-kubevirt 0.5.1-9 on Azure Linux 3.0
  • azl3 containerd2 2.2.4-8 on Azure Linux 3.0
  • azl3 containerd2 2.3.4-1 on Azure Linux 3.0
Show all 33 affected products
  • azl3 cri-tools 1.32.0-7 on Azure Linux 3.0
  • azl3 cri-tools 1.32.0-8 on Azure Linux 3.0
  • azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0
  • azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0
  • azl3 docker-compose 2.27.0-13 on Azure Linux 3.0
  • azl3 docker-compose 2.27.0-14 on Azure Linux 3.0
  • azl3 etcd 3.5.33-1 on Azure Linux 3.0
  • azl3 flannel 0.24.2-31 on Azure Linux 3.0
  • azl3 flannel 0.24.2-32 on Azure Linux 3.0
  • azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0
  • azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0
  • azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0
  • azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0
  • azl3 keda 2.14.1-18 on Azure Linux 3.0
  • azl3 keda 2.14.1-19 on Azure Linux 3.0
  • azl3 kube-vip-cloud-provider 0.0.10-10 on Azure Linux 3.0
  • azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0
  • azl3 kubernetes 1.30.10-29 on Azure Linux 3.0
  • azl3 kubernetes 1.30.10-30 on Azure Linux 3.0
  • azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0
  • azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0
  • azl3 moby-engine 25.0.3-20 on Azure Linux 3.0
  • azl3 opa 0.63.0-5 on Azure Linux 3.0
  • azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0
  • azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0

Source guidance

Remediation

  • Release Notes

At least one Microsoft vendor-fix reference is available. Check each affected product for its applicable update, prerequisites, and supported version.

GTP recommendation · Rule-based guidance

Recommended next step

Review affected Microsoft products and apply the applicable security updates through your organization's normal patch-management process. Confirm availability and prerequisites in the Microsoft advisory.

Authoritative sources & updates

Findings and update information come from the linked publishers. GTP compiles the public record and provides the recommendation above. CVSS ratings shown here come from Microsoft. NVD references provide additional public context.

Managed by GTP?

Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.

Contact GTPManaged Security Services

Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.