---
id: CVE-2026-42602
aliases:
  - GO-2026-5544
  - GHSA-pjv4-3c63-699f
title: >-
  Authenticate method auth bypass in
  github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension
summary: >-
  Authenticate method auth bypass in
  github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension
severity: none
vendor: open-telemetry
product: >-
  github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension
ecosystem: go
affected:
  - >-
    github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension
    >= 0.124.0, < 0.151.0
patched:
  - >-
    github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension
    0.151.0
published: '2026-06-25'
updated: '2026-10-01'
sourceUpdated: '2026-10-01T20:45:09.682863867Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GO-2026-5544'
references:
  - url: >-
      https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-pjv4-3c63-699f
tags:
  - osv
  - go
epss: 0.00326
epssPercentile: 0.23363
ingestedAt: '2026-10-02T07:24:14.790Z'
---

## Overview

Authenticate method auth bypass in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension

## Affected packages

- `github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension >= 0.124.0, < 0.151.0`

## Remediation

Upgrade to a patched release:

- `github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension 0.151.0`