{"id":"CVE-2026-112006","title":"opentelemetry-exporter-otlp-proto-http: opentelemetry-exporter-otlp-proto-http: Information disclosure via improper TLS certificate validat…","summary":"A flaw was found in opentelemetry-exporter-otlp-proto-http. When certificate configuration environment variables are set to empty strings, Transport Layer Security (TLS) verification is unintentionally disabled. A man-in-the-middle attacke…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","cvssSource":"vendor","cwe":"CWE-295","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","affected":["ansible_automation_orchestrator 2026","exploit_intelligence","lightspeed_core","openshift_lightspeed","ai_inference_server","ansible_automation_platform 2","enterprise_linux_ai_rhel_ai 3","openshift_ai_rhoai","quay 3","satellite 6","update_infrastructure_4_for_cloud_providers"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T11:53:53+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112006.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112006.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-112006"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554746"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-112006"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112006"},{"url":"https://github.com/open-telemetry/opentelemetry-python/blob/v1.44.0/exporter/opentelemetry-exporter-otlp-proto-http/src/opentelemetry/exporter/otlp/proto/http/trace_exporter/__init__.py#L170-L185"},{"url":"https://github.com/open-telemetry/opentelemetry-python/blob/v1.44.0/exporter/opentelemetry-exporter-otlp-proto-http/src/opentelemetry/exporter/otlp/proto/http/trace_exporter/__init__.py#L93-L96"},{"url":"https://github.com/open-telemetry/opentelemetry-python/commit/89cc68b9ea7e15969b4f042d63397bdc74a3d60e"},{"url":"https://github.com/open-telemetry/opentelemetry-python/releases/tag/v1.45.0"},{"url":"https://www.vulncheck.com/advisories/opentelemetry-opentelemetry-exporter-otlp-proto-http-1.5.0-before-1.45.0-improper-certificate-validation"}],"tags":["csaf","vex","red-hat","cve.org"],"ingestedAt":"2026-10-18T11:40:26.623Z","slug":"CVE-2026-112006","body":"## Overview\n\nA flaw was found in opentelemetry-exporter-otlp-proto-http. When certificate configuration environment variables are set to empty strings, Transport Layer Security (TLS) verification is unintentionally disabled. A man-in-the-middle attacker can exploit this improper certificate validation to impersonate the telemetry collector, leading to information disclosure and alteration of exported metrics, traces, logs, and authentication headers.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Ansible Automation Orchestrator 2026, Exploit Intelligence, Lightspeed Core, OpenShift Lightspeed, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, … · no fix planned: Exploit Intelligence, Red Hat Ansible Automation Platform 2, Red Hat Update Infrastructure 4 for Cloud Providers, Ansible Automation Orchestrator 2026, … · updated 2026-10-18 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112006.json)\n\n**opentelemetry-exporter-otlp-proto-http: opentelemetry-exporter-otlp-proto-http: Information disclosure via improper TLS certificate validation** — rated Moderate by Red Hat. Released 2026-10-18.\n\nAffected:\n\n- Ansible Automation Orchestrator 2026\n- Exploit Intelligence\n- Lightspeed Core\n- OpenShift Lightspeed\n- Red Hat AI Inference Server\n- Red Hat Ansible Automation Platform 2\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat Quay 3\n- Red Hat Satellite 6\n- Red Hat Update Infrastructure 4 for Cloud Providers\n\nNo fix planned:\n\n- Exploit Intelligence\n- Red Hat Ansible Automation Platform 2\n- Red Hat Update Infrastructure 4 for Cloud Providers\n- Ansible Automation Orchestrator 2026\n- Lightspeed Core\n- OpenShift Lightspeed\n- Red Hat AI Inference Server\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat Quay 3\n- Red Hat Satellite 6\n\n## Remediation\n\nOut of support scope","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}