OpenTelemetry githubreceiver silently ignores configured required_headers authentication

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-55701 · Microsoft / collected KEV context

EUVD-2026-78778

GHSA-w5cv-pw74-4rxc

GO-2026-5690

cve-program · CVE-2026-55701

• https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-w5cv-pw74-4rxc
• https://github.com/open-telemetry/opentelemetry-collector-contrib/pull/47854
• https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/54143ccd14f5ebd74ca741739d2099c7fbebbd98
• https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.151.0

euvd · EUVD-2026-78778

• https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-w5cv-pw74-4rxc
• https://github.com/open-telemetry/opentelemetry-collector-contrib/pull/47854
• https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/54143ccd14f5ebd74ca741739d2099c7fbebbd98
• https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.151.0

nvd · CVE-2026-55701

• https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/54143ccd14f5ebd74ca741739d2099c7fbebbd98
• https://github.com/open-telemetry/opentelemetry-collector-contrib/pull/47854
• https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.151.0
• https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-w5cv-pw74-4rxc

osv · GHSA-w5cv-pw74-4rxc

• https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-w5cv-pw74-4rxc
• https://github.com/open-telemetry/opentelemetry-collector-contrib

osv · GO-2026-5690

• https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-w5cv-pw74-4rxc

No related operational record is retained in the current change model.