Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure when the internal pooled-list sizing grows based on a large observed span/tag set and that enlarged size is reused for subsequent allocations. Under high-cardinality or attacker-influenced telemetry input, this can increase memory consumption and potentially cause denial of service. There is no plan to fix this issue as OpenTelemetry.Exporter.Jaeger was deprecated in 2023.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-41078 OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure when the internal p… https://www.cve.org/CVERecord?id=CVE-2026-41078
Post summary
The text announces CVE-2026-41078, describing a sustained memory pressure issue in OpenTelemetry.Exporter.Jaeger for versions 1.6.0‑rc.1 and earlier.
🟠 OpenTelemetryExporterJaeger, Denial of Service (DoS) via Memory Pressure, #CVE-2026-41078 (Medium) https://dailycve.com/opentelemetryexporterjaeger-denial-of-service-dos-via-memory-pressure-cve-2026-41078-medium/
Post summary
The tweet links to a disclosure article about a Medium‑rated DoS vulnerability in OpenTelemetryExporterJaeger via memory pressure, but provides no PoC, exploit code, patch details, or evidence of active exploitation.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opentelemetry | opentelemetry | - | .net | - |
| App | opentelemetry | opentelemetry | 1.6.0 | .net | - |
| App | opentelemetry | opentelemetry | 1.6.0 | .net | - |
| App | opentelemetry | opentelemetry | 1.6.0 | .net | - |
| App | opentelemetry | opentelemetry | 1.6.0 | .net | - |
| App | opentelemetry | opentelemetry | 1.6.0 | .net | - |