HIGH8.1Go
GHSA-pjv4-3c63-699f· CVE-2026-42602, GO-2026-5544opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay
Modified: 9/10/2026
package
Go/github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension
pkg:go/github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension
—Go
GO-2026-5544· CVE-2026-42602, GHSA-pjv4-3c63-699fopentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension
Modified: 7/2/2026