CVE-2026-40182

{"id": "CVE-2026-40182", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40182", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-23T18:38:48.491134Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "open-telemetry", "product": "opentelemetry-dotnet", "versions": [{"status": "affected", "version": ">= 1.13.1, < 1.15.2"}]}]}], "published": "2026-04-23T18:16:28.130", "references": [{"url": "https://github.com/open-telemetry/opentelemetry-dotnet/pull/6564", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/open-telemetry/opentelemetry-dotnet/pull/7017", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/open-telemetry/opentelemetry-dotnet/security/advisories/GHSA-q834-8qmm-v933", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/open-telemetry/opentelemetry-proto/pull/781", "tags": ["Issue Tracking"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-789"}]}], "descriptions": [{"lang": "en", "value": "OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collector over gRPC or HTTP using OpenTelemetry Protocol format (OTLP), if the request results in a unsuccessful request (i.e. HTTP 4xx or 5xx), the response is read into memory with no upper-bound on the number of bytes consumed. This could cause memory exhaustion in the consuming application if the configured back-end/collector endpoint is attacker-controlled (or a network attacker can MitM the connection) and an extremely large body is returned by the response. This vulnerability is fixed in 1.15.2."}, {"lang": "es", "value": "OpenTelemetry dotnet es un framework de telemetr\u00eda de dotnet. Desde la versi\u00f3n 1.13.1 hasta antes de la 1.15.2, al exportar telemetr\u00eda a un back-end/colector a trav\u00e9s de gRPC o HTTP utilizando el formato del protocolo OpenTelemetry (OTLP), si la solicitud resulta en una solicitud fallida (es decir, HTTP 4xx o 5xx), la respuesta se lee en la memoria sin un l\u00edmite superior en el n\u00famero de bytes consumidos. Esto podr\u00eda causar agotamiento de la memoria en la aplicaci\u00f3n consumidora si el punto final del back-end/colector configurado est\u00e1 controlado por un atacante (o un atacante de red puede realizar un MitM en la conexi\u00f3n) y la respuesta devuelve un cuerpo extremadamente grande. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 1.15.2."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:opentelemetry:opentelemetry:*:*:*:*:*:.net:*:*", "vulnerable": true, "matchCriteriaId": "5539A01E-6E54-4AE2-8D72-6E5C15C01C61", "versionEndExcluding": "1.15.2", "versionStartIncluding": "1.13.1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}