Skip to content
Threat Feed
Subscribe

Product

OpenTelemetry Java Agent

1 brief RSS
critical advisory

OpenTelemetry RMI Instrumentation Unsafe Deserialization RCE

A remote code execution vulnerability exists in OpenTelemetry Java agent versions prior to 2.26.1 due to unsafe deserialization in the RMI instrumentation, potentially allowing attackers with network access to execute arbitrary code on vulnerable systems.

OpenTelemetry Java agent rce opentelemetry deserialization
2r 1t