PT-2026-31450 · Opentelemetry+2 · Opentelemetry-Go+2

CVE-2026-39883 · Publicado 2026-04-08 · Atualizado 2026-07-24

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenTelemetry-Go versões 1.15.0 até 1.42.0

Description A correção para um problema anterior alterou o caminho usado para um comando, mas deixou outro comando vulnerável a um ataque de sequestro de PATH em plataformas BSD e Solaris. Especificamente, o comando kenv é executado sem um caminho absoluto, permitindo que um invasor execute código arbitrário no contexto do aplicativo. Isso ocorre quando /etc/hostid não existe, o que é comum em sistemas FreeBSD. O ataque requer acesso local ao sistema. O comando vulnerável é `exec.Command("kenv", ...).

Recommendations Atualize para a versão 1.43.0 ou posterior.

Exploit

Correção

DoS

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CLEANSTART-2026-AP10784

CLEANSTART-2026-AP81049

CLEANSTART-2026-AP95632

CLEANSTART-2026-AR14847

CLEANSTART-2026-AR38431

CLEANSTART-2026-AV21509

CLEANSTART-2026-BA41349

CLEANSTART-2026-BB83999

CLEANSTART-2026-BD19566

CLEANSTART-2026-BN28456

CLEANSTART-2026-BS27946

CLEANSTART-2026-BU39038

CLEANSTART-2026-BU65096

CLEANSTART-2026-CB00984

CLEANSTART-2026-CC08450

CLEANSTART-2026-CD13174

CLEANSTART-2026-CI59834

CLEANSTART-2026-CL67452

CLEANSTART-2026-CN27900

CLEANSTART-2026-CN84623

CLEANSTART-2026-CZ07385

CLEANSTART-2026-DA99134

CLEANSTART-2026-DN70218

CLEANSTART-2026-DR81473

CLEANSTART-2026-DW32113

CLEANSTART-2026-EF68467

CLEANSTART-2026-EH36582

CLEANSTART-2026-EI06494

CLEANSTART-2026-EL10860

CLEANSTART-2026-EM89202

CLEANSTART-2026-EP10142

CLEANSTART-2026-EP65920

CLEANSTART-2026-FA95643

CLEANSTART-2026-FB07695

CLEANSTART-2026-FK40318

CLEANSTART-2026-FR69458

CLEANSTART-2026-FU04414

CLEANSTART-2026-FV86809

CLEANSTART-2026-GB38700

CLEANSTART-2026-GB46352

CLEANSTART-2026-GG06672

CLEANSTART-2026-GN78570

CLEANSTART-2026-GQ12922

CLEANSTART-2026-GY48351

CLEANSTART-2026-HB06257

CLEANSTART-2026-HC15345

CLEANSTART-2026-HE31644

CLEANSTART-2026-HF07497

CLEANSTART-2026-HI89495

CLEANSTART-2026-HK01840

CLEANSTART-2026-HO16255

CLEANSTART-2026-IC09970

CLEANSTART-2026-IS19112

CLEANSTART-2026-JH93057

CLEANSTART-2026-JI93588

CLEANSTART-2026-JK52519

CLEANSTART-2026-JV26120

CLEANSTART-2026-JY63371

CLEANSTART-2026-JY65496

CLEANSTART-2026-KF86214

CLEANSTART-2026-KJ58915

CLEANSTART-2026-KJ73757

CLEANSTART-2026-KL41807

CLEANSTART-2026-KO23583

CLEANSTART-2026-LM43244

CLEANSTART-2026-LO55919

CLEANSTART-2026-LO63022

CLEANSTART-2026-LT10352

CLEANSTART-2026-LU21824

CLEANSTART-2026-MA24172

CLEANSTART-2026-MC76610

CLEANSTART-2026-MI12470

CLEANSTART-2026-MK41253

CLEANSTART-2026-MO33100

CLEANSTART-2026-MP82813

CLEANSTART-2026-MW24969

CLEANSTART-2026-MW66533

CLEANSTART-2026-MY03287

CLEANSTART-2026-MY68881

CLEANSTART-2026-MZ61768

CLEANSTART-2026-NB83265

CLEANSTART-2026-NG28268

CLEANSTART-2026-NM43450

CLEANSTART-2026-NS33477

CLEANSTART-2026-NT80635

CLEANSTART-2026-OF37807

CLEANSTART-2026-OF46770

CLEANSTART-2026-OH72236

CLEANSTART-2026-OR40192

CLEANSTART-2026-OU18540

CLEANSTART-2026-PB32291

CLEANSTART-2026-PD78752

CLEANSTART-2026-PF56679

CLEANSTART-2026-PH23874

CLEANSTART-2026-PM06830

CLEANSTART-2026-PM81907

CLEANSTART-2026-PT56560

CLEANSTART-2026-QO29688

CLEANSTART-2026-QT53274

CLEANSTART-2026-QW08095

CLEANSTART-2026-RE02723

CLEANSTART-2026-RL64341

CLEANSTART-2026-SO13464

CLEANSTART-2026-SO47947

CLEANSTART-2026-SP73148

CLEANSTART-2026-TE02851

CLEANSTART-2026-TT42218

CLEANSTART-2026-UI27816

CLEANSTART-2026-UV44486

CLEANSTART-2026-UW03847

CLEANSTART-2026-UW08576

CLEANSTART-2026-UX07516

CLEANSTART-2026-UY10441

CLEANSTART-2026-UY68298

CLEANSTART-2026-VD47610

CLEANSTART-2026-VN02574

CLEANSTART-2026-VT65447

CLEANSTART-2026-VU72808

CLEANSTART-2026-VV82680

CLEANSTART-2026-VZ08395

CLEANSTART-2026-WA14162

CLEANSTART-2026-WB89098

CLEANSTART-2026-WF25734

CLEANSTART-2026-WK17839

CLEANSTART-2026-WL14185

CLEANSTART-2026-WS85269

CLEANSTART-2026-WW41817

CLEANSTART-2026-WW53101

CLEANSTART-2026-WY21381

CLEANSTART-2026-XB51326

CLEANSTART-2026-XJ06210

CLEANSTART-2026-XN15507

CLEANSTART-2026-XN33394

CLEANSTART-2026-XO18404

CLEANSTART-2026-XO70994

CLEANSTART-2026-XR35583

CLEANSTART-2026-YA34975

CLEANSTART-2026-YB92538

CLEANSTART-2026-YE67255

CLEANSTART-2026-YF74364

CLEANSTART-2026-YG71543

CLEANSTART-2026-YH23797

CLEANSTART-2026-YV44838

CLEANSTART-2026-YY48565

CLEANSTART-2026-YZ90223

CLEANSTART-2026-ZD29280

CLEANSTART-2026-ZF00349

CVE-2026-39883

GHSA-HFVC-G4FC-PQHX

GO-2026-5426

OPENSUSE-SU-2026:11173-1

Produtos afetados

Freebsd

Opentelemetry-Go

Solaris

Referências · 746

• 🔥 https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39883.json · Exploit
• https://github.com/open-telemetry/opentelemetry-go · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YG71543.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NM43450.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XR35583.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OF46770.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YA34975.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PH23874.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UY68298.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EH36582.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WK17839.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SP73148.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JI93588.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QT53274.json · Nota