CVE-2026-41433 - Vulnerability Analysis

Overview

OpenTelemetry eBPF Instrumentation 0.4.0 to < 0.8.0 contains a file system boundary escape and symlink-based file clobbering vulnerability caused by unsafe file creation semantics in the Java agent injection path, letting local attackers overwrite arbitrary host files when Java injection is enabled and running with elevated privileges, exploit requires elevated privileges.

Severity & Score

Impact

Local attackers with elevated privileges can overwrite arbitrary host files, potentially leading to system compromise or data loss.

Mitigation

Upgrade to version 0.8.0 or later.

References

• https://github.com/open-telemetry/opentelemetry-ebpf-instrumentation/releases/tag/v0.8.0
• https://github.com/open-telemetry/opentelemetry-ebpf-instrumentation/security/advisories/GHSA-8gmg-3w2q-65f4

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner