Loading vulnerability…
CVE-2026-47256 is a path traversal and query-string injection vulnerability in the OpenTelemetry Collector Contrib Sentry exporter package, github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter. According to the provided advisory, attacker-controlled service.name values received from remote OTLP senders are used to derive Sentry project slug values without sufficient validation before constructing Sentry API URL paths. This allows a remote sender to manipulate the resulting Sentry API request path and query string, causing the collector to access arbitrary Sentry API endpoints using the bearer token configured by the operator for the exporter. The core flaw is improper neutralization of path elements in externally influenced URL construction, enabling traversal away from the intended project-specific API path and injection of attacker-chosen request components.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
No public activity tracked yet. Mallory keeps watching.
No public activity observed for this vulnerability.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.