Package · Maven

io.opentelemetry.javaagent:opentelemetry-javaagent

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.3

CVE-2026-33701 Public exploit

OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution

OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.26.1, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serializa…

open-telemetry opentelemetry-java-instrumentation io.opentelemetry.javaagent:opentelemetry-javaagent Maven

Mar 27, 2026