{"id":"EUVD-2026-77578","enisaUuid":"dcee327b-2e20-336b-88d4-448f93ca72fd","description":"The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior to 0.152.0, cmd/otel-allocator TargetAllocator instances with targetAllocator.prometheusCR.enabled set to true preserve a selected ServiceMonitor endpoint\u0027s bearerTokenFile value as HTTPClientConfig.Authorization.CredentialsFile. A tenant who can create or update a ServiceMonitor matched by serviceMonitorSelector and serviceMonitorNamespaceSelector can point bearerTokenFile at a file in the Collector pod, including /var/run/secrets/kubernetes.io/serviceaccount/token, and direct scraping to a tenant-controlled endpoint. The Collector reads that file at scrape time and sends its contents as bearer authorization on every scrape interval. Exploitation also requires the Collector service-account token or another sensitive file to be mounted and the Collector to reach the chosen target. The DenyFSAccessThroughSMs control was absent, allowing disclosure of the Collector\u0027s service-account JWT or other mounted files, and resulting Kubernetes API impact is limited by the Collector service account\u0027s permissions. This issue is fixed in version 0.152.0.","datePublished":"Sep 14, 2026, 3:32:56 PM","dateUpdated":"Sep 14, 2026, 4:43:18 PM","baseScore":7.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","references":"https://github.com/open-telemetry/opentelemetry-operator/security/advisories/GHSA-cxh2-4639-vmc5\nhttps://github.com/open-telemetry/opentelemetry-operator/pull/5104\nhttps://github.com/open-telemetry/opentelemetry-operator/commit/95a8c2a3dc64a762d3ab8eba8c903b5702a03a9c\nhttps://github.com/open-telemetry/opentelemetry-operator/releases/tag/v0.152.0\n","aliases":"CVE-2026-47701\nGHSA-cxh2-4639-vmc5\n","assigner":"GitHub_M","epss":0.46,"enisaIdProduct":[{"id":"4aacbb2f-2fe0-353c-b5c2-9479e6ec28d5","product":{"name":"opentelemetry-operator","vendor":{"name":"open-telemetry"}},"product_version":"\u003c 0.152.0"}],"enisaIdVendor":[{"id":"13edecbb-a796-38d9-a462-d61c53be5134","vendor":{"name":"open-telemetry"}}],"enisaIdVulnerability":[{"id":"4a3cb8f8-2ca5-392f-bca5-c1af876a663b","vulnerability":{"id":"CVE-2026-47701","description":"The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior to 0.152.0, cmd/otel-allocator TargetAllocator instances with targetAllocator.prometheusCR.enabled set to true preserve a selected ServiceMonitor endpoint\u0027s bearerTokenFile value as HTTPClientConfig.Authorization.CredentialsFile. A tenant who can create or update a ServiceMonitor matched by serviceMonitorSelector and serviceMonitorNamespaceSelector can point bearerTokenFile at a file in the Collector pod, including /var/run/secrets/kubernetes.io/serviceaccount/token, and direct scraping to a tenant-controlled endpoint. The Collector reads that file at scrape time and sends its contents as bearer authorization on every scrape interval. Exploitation also requires the Collector service-account token or another sensitive file to be mounted and the Collector to reach the chosen target. The DenyFSAccessThroughSMs control was absent, allowing disclosure of the Collector\u0027s service-account JWT or other mounted files, and resulting Kubernetes API impact is limited by the Collector service account\u0027s permissions. This issue is fixed in version 0.152.0.","datePublished":"Sep 14, 2026, 3:32:56 PM","dateUpdated":"Sep 14, 2026, 4:43:18 PM","status":"PUBLISHED","baseScore":7.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","references":"https://github.com/open-telemetry/opentelemetry-operator/security/advisories/GHSA-cxh2-4639-vmc5\nhttps://github.com/open-telemetry/opentelemetry-operator/pull/5104\nhttps://github.com/open-telemetry/opentelemetry-operator/commit/95a8c2a3dc64a762d3ab8eba8c903b5702a03a9c\nhttps://github.com/open-telemetry/opentelemetry-operator/releases/tag/v0.152.0\n","enisa_id":"EUVD-2026-77578\n","assigner":"GitHub_M","epss":0.46,"dataProcessed":"Nov 9, 2026, 7:17:40 AM","vulnerabilityProduct":[{"id":"77e677c6-a784-3e0b-8979-69f2586f5712","product":{"name":"opentelemetry-operator","vendor":{"name":"open-telemetry"}},"product_version":"\u003c 0.152.0"}],"vulnerabilityVendor":[{"id":"03031e4d-0793-3929-9c97-714670b2fe5c","vendor":{"name":"open-telemetry"}}]}},{"id":"a90fb2e5-1fe5-36c0-926b-40a5fd6518e8","vulnerability":{"id":"GHSA-cxh2-4639-vmc5","description":"OpenTelemetry Operator for Kubernetes\u0027s ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth","datePublished":"Jun 10, 2026, 5:24:01 PM","dateUpdated":"Jun 10, 2026, 5:24:01 PM","baseScore":0.0,"references":"https://github.com/open-telemetry/opentelemetry-operator/security/advisories/GHSA-cxh2-4639-vmc5\nhttps://github.com/open-telemetry/opentelemetry-operator/pull/5104\nhttps://github.com/open-telemetry/opentelemetry-operator\n","enisa_id":"EUVD-2026-77578\n","aliases":"GHSA-cxh2-4639-vmc5\nCVE-2026-47701\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 1:58:34 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}