LOW2.0
GO-2026-6505
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace
Quick fix
GO-2026-6505 — go.opentelemetry.io/otel/exporters/otlp/otlptrace: upgrade to the fixed version with the command below.
go get go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.45.0Details
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace
Introduced in:
1.5.0Fixed in: 1.45.0Fix
go get go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.45.0Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
Introduced in:
1.5.0Fixed in: 1.45.0Fix
go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.45.0Go/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
Introduced in:
1.5.0Fixed in: 1.45.0Fix
go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.45.0Go/go.opentelemetry.io/otel/exporters/zipkin
Introduced in:
1.5.0Fixed in: 1.45.0Fix
go get go.opentelemetry.io/otel/exporters/zipkin@v1.45.0Go/go.opentelemetry.io/otel/sdk
Introduced in:
1.5.0Fixed in: 1.45.0Fix
go get go.opentelemetry.io/otel/sdk@v1.45.0References
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-81870[ADVISORY]
- https://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38[WEB]
- https://github.com/open-telemetry/opentelemetry-go/pull/8438[WEB]
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0[WEB]
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0[WEB]