OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-81192 · CVE overview and exploitation status

EUVD-2026-74187

GHSA-v8pv-4842-x354

cve-program · CVE-2026-81192

• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/security/advisories/GHSA-v8pv-4842-x354
• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/1631
• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/4760

euvd · EUVD-2026-74187

• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/security/advisories/GHSA-v8pv-4842-x354
• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/1631
• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/4760

nvd · CVE-2026-81192

• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/1631
• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/4760
• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/security/advisories/GHSA-v8pv-4842-x354

osv · GHSA-v8pv-4842-x354

• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/security/advisories/GHSA-v8pv-4842-x354
• https://nvd.nist.gov/vuln/detail/CVE-2026-81192
• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/1631
• https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/4760
• https://github.com/open-telemetry/opentelemetry-dotnet-contrib

No related changes are available here.