CVE-2026-48496

Received Received - Intake

OpenTelemetry eBPF Profiler Denial of Service via FIFO Blocking

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: GitHub, Inc.

Description

OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages. Starting in version 0.0.202527 and prior to version 0.0.202622, an unprivileged process can cause the profiler to open a nonregular mapping file, such as a FIFO, and block indefinitely, preventing further ELF analysis and causing a denial of service. Version 0.0.202622 contains a patch. No known workarounds are available.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-48496

Affected Vendors & Products

Vendor	Product	Version / Range
opentelemetry	ebpf_profiler	From 0.0.202622\|end_excluding=0.0.202622 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

OpenTelemetry eBPF Profiler versions before 0.0.202622 allow an unprivileged process to open a nonregular file like a FIFO, blocking the profiler indefinitely. This prevents ELF analysis and causes a denial of service.

Detection Guidance

This vulnerability may be detected by checking the version of OpenTelemetry eBPF Profiler running on your system. If the version is between 0.0.202527 and 0.0.202622, it is vulnerable. Use commands like 'opentelemetry-ebpf-profiler --version' or inspect package managers for installed versions.

Impact Analysis

This vulnerability can cause the profiler to hang, stopping application profiling and potentially disrupting monitoring and debugging operations in production environments.

Compliance Impact

This vulnerability causes a denial of service by blocking ELF analysis, which could disrupt monitoring and logging systems. For GDPR, this may impact data integrity and availability requirements under Article 32. For HIPAA, it could affect the integrity and availability of protected health information under the Security Rule.

Mitigation Strategies

Upgrade OpenTelemetry eBPF Profiler to version 0.0.202622 or later to patch the vulnerability. No known workarounds exist, so updating is the only mitigation. Verify the update with version checks after installation.

Hi! I’m here to help you understand CVE-2026-48496. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70