6.2
Medium
CVE-2026-48496 OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages
Description
OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages. Starting in version 0.0.202527 and prior to version 0.0.202622, an unprivileged process can cause the profiler to open a nonregular mapping file, such as a FIFO, and block indefinitely, preventing further ELF analysis and causing a denial of service. Version 0.0.202622 contains a patch. No known workarounds are available.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| opentelemetry-ebpf-profiler 0.0 | 0.0.202527 → < 0.0.202622 | 0.0.202622 |
References
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified