OpenTelemetry OTLP Exporter Disk Retry Local Blob Injection Vulnerability (GHSA-4625-47f6-fww9)

Vulnerability Summary: Disk retry default temp path enables local blob injection for OTLP Exporter Vulnerability Overview Vulnerability Name: Disk retry default temp path enables local blob injection for OTLP Exporter Vulnerability ID: GHSA-4625-47f6-fww9 Severity: Moderate (CVSS v3 base metrics: 6.5 / 10) Description: The OTLP disk retry feature in the OpenTelemetry Exporter falls back to using the system temporary directory ( ) when is configured but is not set. This allows attackers to inject malicious files into that directory, leading to the following security issues: - Blob Injection (Integrity): Attackers can write malicious files, which are then picked up and forwarded to the configured OTLP endpoint during retry cycles. - Telemetry Data Leakage (Confidentiality): Attackers can read files to recover encoded telemetry data (e.g., spans, metric data points, log records). - Resource Exhaustion (Availability): Attackers can place a large number of oversized blob files, causing retry loop performance degradation or disk space exhaustion. Affected Versions Affected Versions: OpenTelemetry.Exporter.OpenTelemetryProtocol >= 1.8.0, < 1.15.3 Fixed Version: 1.15.3 Remediation Upgrade Immediately: Upgrade to the patched version 1.15.3. If Immediate Upgrade Is Not Possible: 1. Avoid enabling disk retry in shared environments. 2. Configure a dedicated directory with strict ACL permissions and least privilege access. 3. Ensure the directory is not shared with cross-tenant users. 4. Monitor for unexpected files or abnormal growth in retry backlog. Exploit Code No specific POC code or exploit code is provided in the page.

Goal Reached Thanks to every supporter — we hit 100%!

OpenTelemetry OTLP Exporter Disk Retry Local Blob Injection Vulnerability (GHSA-4625-47f6-fww9)

More from this source