{"id":"CVE-2026-24051","summary":"OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking","details":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking (Untrusted Search Paths) on macOS/Darwin systems. The resource detection code in sdk/resource/host_id.go executes the ioreg system command using a search path. An attacker with the ability to locally modify the PATH environment variable can achieve Arbitrary Code Execution (ACE) within the context of the application. A fix was released with v1.40.0.","aliases":["GHSA-9h8m-3fm2-qjrq","GO-2026-4394"],"modified":"2026-04-26T09:59:15.390353331Z","published":"2026-02-02T19:49:10.038Z","related":["CGA-mqpq-rvmw-8rpr","SUSE-SU-2026:0757-1","openSUSE-SU-2026:10396-1","openSUSE-SU-2026:10613-1"],"database_specific":{"cwe_ids":["CWE-426"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24051.json","cna_assigner":"GitHub_M"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24051.json"},{"type":"ADVISORY","url":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-9h8m-3fm2-qjrq"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24051"},{"type":"FIX","url":"https://github.com/open-telemetry/opentelemetry-go/commit/d45961bcda453fcbdb6469c22d6e88a1f9970a53"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/open-telemetry/opentelemetry-go","events":[{"introduced":"98b32a6c3a87fbee5d34c063b9096f416b250897"},{"fixed":"a3a5317c5caed1656fb5b301b66dfeb3c4c944e0"}]}],"versions":["bridge/opencensus/test/v0.44.0","bridge/opencensus/test/v0.45.0","bridge/opencensus/test/v1.23.0","bridge/opencensus/test/v1.23.0-rc.1","bridge/opencensus/test/v1.23.1","bridge/opencensus/test/v1.24.0","bridge/opencensus/test/v1.25.0","bridge/opencensus/test/v1.26.0","bridge/opencensus/test/v1.27.0","bridge/opencensus/test/v1.28.0","bridge/opencensus/test/v1.29.0","bridge/opencensus/test/v1.30.0","bridge/opencensus/test/v1.31.0","bridge/opencensus/test/v1.32.0","bridge/opencensus/test/v1.33.0","bridge/opencensus/test/v1.34.0","bridge/opencensus/test/v1.35.0","bridge/opencensus/test/v1.36.0","bridge/opencensus/test/v1.37.0","bridge/opencensus/test/v1.38.0","bridge/opencensus/test/v1.39.0","bridge/opencensus/v0.44.0","bridge/opencensus/v0.45.0","bridge/opencensus/v1.23.0","bridge/opencensus/v1.23.0-rc.1","bridge/opencensus/v1.23.1","bridge/opencensus/v1.24.0","bridge/opencensus/v1.25.0","bridge/opencensus/v1.26.0","bridge/opencensus/v1.27.0","bridge/opencensus/v1.28.0","bridge/opencensus/v1.29.0","bridge/opencensus/v1.30.0","bridge/opencensus/v1.31.0","bridge/opencensus/v1.32.0","bridge/opencensus/v1.33.0","bridge/opencensus/v1.34.0","bridge/opencensus/v1.35.0","bridge/opencensus/v1.36.0","bridge/opencensus/v1.37.0","bridge/opencensus/v1.38.0","bridge/opencensus/v1.39.0","bridge/opentracing/test/v1.21.0","bridge/opentracing/test/v1.22.0","bridge/opentracing/test/v1.23.0","bridge/opentracing/test/v1.23.0-rc.1","bridge/opentracing/test/v1.23.1","bridge/opentracing/test/v1.24.0","bridge/opentracing/test/v1.25.0","bridge/opentracing/test/v1.26.0","bridge/opentracing/test/v1.27.0","bridge/opentracing/test/v1.28.0","bridge/opentracing/test/v1.29.0","bridge/opentracing/test/v1.30.0","bridge/opentracing/test/v1.31.0","bridge/opentracing/test/v1.32.0","bridge/opentracing/test/v1.33.0","bridge/opentracing/test/v1.34.0","bridge/opentracing/test/v1.35.0","bridge/opentracing/test/v1.36.0","bridge/opentracing/v1.21.0","bridge/opentracing/v1.22.0","bridge/opentracing/v1.23.0","bridge/opentracing/v1.23.0-rc.1","bridge/opentracing/v1.23.1","bridge/opentracing/v1.24.0","bridge/opentracing/v1.25.0","bridge/opentracing/v1.26.0","bridge/opentracing/v1.27.0","bridge/opentracing/v1.28.0","bridge/opentracing/v1.29.0","bridge/opentracing/v1.30.0","bridge/opentracing/v1.31.0","bridge/opentracing/v1.32.0","bridge/opentracing/v1.33.0","bridge/opentracing/v1.34.0","bridge/opentracing/v1.35.0","bridge/opentracing/v1.36.0","bridge/opentracing/v1.37.0","bridge/opentracing/v1.38.0","bridge/opentracing/v1.39.0","example/dice/v1.21.0","example/dice/v1.22.0","example/dice/v1.23.0","example/dice/v1.23.0-rc.1","example/dice/v1.23.1","example/dice/v1.24.0","example/dice/v1.25.0","example/dice/v1.26.0","example/dice/v1.27.0","example/dice/v1.28.0","example/dice/v1.29.0","example/dice/v1.30.0","example/dice/v1.31.0","example/namedtracer/v1.21.0","example/namedtracer/v1.22.0","example/namedtracer/v1.23.0","example/namedtracer/v1.23.0-rc.1","example/namedtracer/v1.23.1","example/namedtracer/v1.24.0","example/namedtracer/v1.25.0","example/namedtracer/v1.26.0","example/namedtracer/v1.27.0","example/namedtracer/v1.28.0","example/namedtracer/v1.29.0","example/namedtracer/v1.30.0","example/namedtracer/v1.31.0","example/opencensus/v0.44.0","example/opencensus/v0.45.0","example/opencensus/v1.23.0","example/opencensus/v1.23.0-rc.1","example/opencensus/v1.23.1","example/opencensus/v1.24.0","example/opencensus/v1.25.0","example/opencensus/v1.26.0","example/opencensus/v1.27.0","example/opencensus/v1.28.0","example/opencensus/v1.29.0","example/opencensus/v1.30.0","example/opencensus/v1.31.0","example/otel-collector/v1.21.0","example/otel-collector/v1.22.0","example/otel-collector/v1.23.0","example/otel-collector/v1.23.0-rc.1","example/otel-collector/v1.23.1","example/otel-collector/v1.24.0","example/otel-collector/v1.25.0","example/otel-collector/v1.26.0","example/otel-collector/v1.27.0","example/otel-collector/v1.28.0","example/otel-collector/v1.29.0","example/otel-collector/v1.30.0","example/otel-collector/v1.31.0","example/passthrough/v1.21.0","example/passthrough/v1.22.0","example/passthrough/v1.23.0","example/passthrough/v1.23.0-rc.1","example/passthrough/v1.23.1","example/passthrough/v1.24.0","example/passthrough/v1.25.0","example/passthrough/v1.26.0","example/passthrough/v1.27.0","example/passthrough/v1.28.0","example/passthrough/v1.29.0","example/passthrough/v1.30.0","example/passthrough/v1.31.0","example/prometheus/v0.44.0","example/prometheus/v0.45.0","example/prometheus/v0.45.1","example/prometheus/v0.45.2","example/prometheus/v0.46.0","example/prometheus/v0.47.0","example/prometheus/v0.48.0","example/prometheus/v0.49.0","example/prometheus/v0.50.0","example/prometheus/v0.51.0","example/prometheus/v0.52.0","example/prometheus/v0.53.0","example/zipkin/v1.21.0","example/zipkin/v1.22.0","example/zipkin/v1.23.0","example/zipkin/v1.23.0-rc.1","example/zipkin/v1.23.1","example/zipkin/v1.24.0","example/zipkin/v1.25.0","example/zipkin/v1.26.0","example/zipkin/v1.27.0","example/zipkin/v1.28.0","example/zipkin/v1.29.0","example/zipkin/v1.30.0","example/zipkin/v1.31.0","exporters/otlp/otlplog/otlploggrpc/v0.10.0","exporters/otlp/otlplog/otlploggrpc/v0.11.0","exporters/otlp/otlplog/otlploggrpc/v0.12.0","exporters/otlp/otlplog/otlploggrpc/v0.12.1","exporters/otlp/otlplog/otlploggrpc/v0.12.2","exporters/otlp/otlplog/otlploggrpc/v0.13.0","exporters/otlp/otlplog/otlploggrpc/v0.14.0","exporters/otlp/otlplog/otlploggrpc/v0.15.0","exporters/otlp/otlplog/otlploggrpc/v0.5.0","exporters/otlp/otlplog/otlploggrpc/v0.6.0","exporters/otlp/otlplog/otlploggrpc/v0.7.0","exporters/otlp/otlplog/otlploggrpc/v0.8.0","exporters/otlp/otlplog/otlploggrpc/v0.9.0","exporters/otlp/otlplog/otlploghttp/v0.10.0","exporters/otlp/otlplog/otlploghttp/v0.11.0","exporters/otlp/otlplog/otlploghttp/v0.12.0","exporters/otlp/otlplog/otlploghttp/v0.12.1","exporters/otlp/otlplog/otlploghttp/v0.12.2","exporters/otlp/otlplog/otlploghttp/v0.13.0","exporters/otlp/otlplog/otlploghttp/v0.14.0","exporters/otlp/otlplog/otlploghttp/v0.15.0","exporters/otlp/otlplog/otlploghttp/v0.2.0-alpha","exporters/otlp/otlplog/otlploghttp/v0.3.0","exporters/otlp/otlplog/otlploghttp/v0.4.0","exporters/otlp/otlplog/otlploghttp/v0.5.0","exporters/otlp/otlplog/otlploghttp/v0.6.0","exporters/otlp/otlplog/otlploghttp/v0.7.0","exporters/otlp/otlplog/otlploghttp/v0.8.0","exporters/otlp/otlplog/otlploghttp/v0.9.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.44.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v0.45.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.23.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.23.0-rc.1","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.23.1","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.24.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.25.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.26.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.27.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.28.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.29.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.30.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.31.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.32.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.33.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.34.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.35.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.36.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.37.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.38.0","exporters/otlp/otlpmetric/otlpmetricgrpc/v1.39.0","exporters/otlp/otlpmetric/otlpmetrichttp/v0.44.0","exporters/otlp/otlpmetric/otlpmetrichttp/v0.45.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.23.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.23.0-rc.1","exporters/otlp/otlpmetric/otlpmetrichttp/v1.23.1","exporters/otlp/otlpmetric/otlpmetrichttp/v1.24.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.25.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.26.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.27.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.28.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.29.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.30.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.31.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.32.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.33.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.34.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.35.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.36.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.37.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.38.0","exporters/otlp/otlpmetric/otlpmetrichttp/v1.39.0","exporters/otlp/otlptrace/otlptracegrpc/v1.21.0","exporters/otlp/otlptrace/otlptracegrpc/v1.22.0","exporters/otlp/otlptrace/otlptracegrpc/v1.23.0","exporters/otlp/otlptrace/otlptracegrpc/v1.23.0-rc.1","exporters/otlp/otlptrace/otlptracegrpc/v1.23.1","exporters/otlp/otlptrace/otlptracegrpc/v1.24.0","exporters/otlp/otlptrace/otlptracegrpc/v1.25.0","exporters/otlp/otlptrace/otlptracegrpc/v1.26.0","exporters/otlp/otlptrace/otlptracegrpc/v1.27.0","exporters/otlp/otlptrace/otlptracegrpc/v1.28.0","exporters/otlp/otlptrace/otlptracegrpc/v1.29.0","exporters/otlp/otlptrace/otlptracegrpc/v1.30.0","exporters/otlp/otlptrace/otlptracegrpc/v1.31.0","exporters/otlp/otlptrace/otlptracegrpc/v1.32.0","exporters/otlp/otlptrace/otlptracegrpc/v1.33.0","exporters/otlp/otlptrace/otlptracegrpc/v1.34.0","exporters/otlp/otlptrace/otlptracegrpc/v1.35.0","exporters/otlp/otlptrace/otlptracegrpc/v1.36.0","exporters/otlp/otlptrace/otlptracegrpc/v1.37.0","exporters/otlp/otlptrace/otlptracegrpc/v1.38.0","exporters/otlp/otlptrace/otlptracegrpc/v1.39.0","exporters/otlp/otlptrace/otlptracehttp/v1.21.0","exporters/otlp/otlptrace/otlptracehttp/v1.22.0","exporters/otlp/otlptrace/otlptracehttp/v1.23.0","exporters/otlp/otlptrace/otlptracehttp/v1.23.0-rc.1","exporters/otlp/otlptrace/otlptracehttp/v1.23.1","exporters/otlp/otlptrace/otlptracehttp/v1.24.0","exporters/otlp/otlptrace/otlptracehttp/v1.25.0","exporters/otlp/otlptrace/otlptracehttp/v1.26.0","exporters/otlp/otlptrace/otlptracehttp/v1.27.0","exporters/otlp/otlptrace/otlptracehttp/v1.28.0","exporters/otlp/otlptrace/otlptracehttp/v1.29.0","exporters/otlp/otlptrace/otlptracehttp/v1.30.0","exporters/otlp/otlptrace/otlptracehttp/v1.31.0","exporters/otlp/otlptrace/otlptracehttp/v1.32.0","exporters/otlp/otlptrace/otlptracehttp/v1.33.0","exporters/otlp/otlptrace/otlptracehttp/v1.34.0","exporters/otlp/otlptrace/otlptracehttp/v1.35.0","exporters/otlp/otlptrace/otlptracehttp/v1.36.0","exporters/otlp/otlptrace/otlptracehttp/v1.37.0","exporters/otlp/otlptrace/otlptracehttp/v1.38.0","exporters/otlp/otlptrace/otlptracehttp/v1.39.0","exporters/otlp/otlptrace/v1.21.0","exporters/otlp/otlptrace/v1.22.0","exporters/otlp/otlptrace/v1.23.0","exporters/otlp/otlptrace/v1.23.0-rc.1","exporters/otlp/otlptrace/v1.23.1","exporters/otlp/otlptrace/v1.24.0","exporters/otlp/otlptrace/v1.25.0","exporters/otlp/otlptrace/v1.26.0","exporters/otlp/otlptrace/v1.27.0","exporters/otlp/otlptrace/v1.28.0","exporters/otlp/otlptrace/v1.29.0","exporters/otlp/otlptrace/v1.30.0","exporters/otlp/otlptrace/v1.31.0","exporters/otlp/otlptrace/v1.32.0","exporters/otlp/otlptrace/v1.33.0","exporters/otlp/otlptrace/v1.34.0","exporters/otlp/otlptrace/v1.35.0","exporters/otlp/otlptrace/v1.36.0","exporters/otlp/otlptrace/v1.37.0","exporters/otlp/otlptrace/v1.38.0","exporters/otlp/otlptrace/v1.39.0","exporters/prometheus/v0.44.0","exporters/prometheus/v0.45.0","exporters/prometheus/v0.45.1","exporters/prometheus/v0.45.2","exporters/prometheus/v0.46.0","exporters/prometheus/v0.47.0","exporters/prometheus/v0.48.0","exporters/prometheus/v0.49.0","exporters/prometheus/v0.50.0","exporters/prometheus/v0.51.0","exporters/prometheus/v0.52.0","exporters/prometheus/v0.53.0","exporters/prometheus/v0.54.0","exporters/prometheus/v0.55.0","exporters/prometheus/v0.56.0","exporters/prometheus/v0.57.0","exporters/prometheus/v0.58.0","exporters/prometheus/v0.59.0","exporters/prometheus/v0.59.1","exporters/prometheus/v0.60.0","exporters/prometheus/v0.61.0","exporters/stdout/stdoutlog/v0.10.0","exporters/stdout/stdoutlog/v0.11.0","exporters/stdout/stdoutlog/v0.12.0","exporters/stdout/stdoutlog/v0.12.1","exporters/stdout/stdoutlog/v0.12.2","exporters/stdout/stdoutlog/v0.13.0","exporters/stdout/stdoutlog/v0.14.0","exporters/stdout/stdoutlog/v0.15.0","exporters/stdout/stdoutlog/v0.2.0-alpha","exporters/stdout/stdoutlog/v0.3.0","exporters/stdout/stdoutlog/v0.4.0","exporters/stdout/stdoutlog/v0.5.0","exporters/stdout/stdoutlog/v0.6.0","exporters/stdout/stdoutlog/v0.7.0","exporters/stdout/stdoutlog/v0.8.0","exporters/stdout/stdoutlog/v0.9.0","exporters/stdout/stdoutmetric/v0.44.0","exporters/stdout/stdoutmetric/v0.45.0","exporters/stdout/stdoutmetric/v1.23.0","exporters/stdout/stdoutmetric/v1.23.0-rc.1","exporters/stdout/stdoutmetric/v1.23.1","exporters/stdout/stdoutmetric/v1.24.0","exporters/stdout/stdoutmetric/v1.25.0","exporters/stdout/stdoutmetric/v1.26.0","exporters/stdout/stdoutmetric/v1.27.0","exporters/stdout/stdoutmetric/v1.28.0","exporters/stdout/stdoutmetric/v1.29.0","exporters/stdout/stdoutmetric/v1.30.0","exporters/stdout/stdoutmetric/v1.31.0","exporters/stdout/stdoutmetric/v1.32.0","exporters/stdout/stdoutmetric/v1.33.0","exporters/stdout/stdoutmetric/v1.34.0","exporters/stdout/stdoutmetric/v1.35.0","exporters/stdout/stdoutmetric/v1.36.0","exporters/stdout/stdoutmetric/v1.37.0","exporters/stdout/stdoutmetric/v1.38.0","exporters/stdout/stdoutmetric/v1.39.0","exporters/stdout/stdouttrace/v1.21.0","exporters/stdout/stdouttrace/v1.22.0","exporters/stdout/stdouttrace/v1.23.0","exporters/stdout/stdouttrace/v1.23.0-rc.1","exporters/stdout/stdouttrace/v1.23.1","exporters/stdout/stdouttrace/v1.24.0","exporters/stdout/stdouttrace/v1.25.0","exporters/stdout/stdouttrace/v1.26.0","exporters/stdout/stdouttrace/v1.27.0","exporters/stdout/stdouttrace/v1.28.0","exporters/stdout/stdouttrace/v1.29.0","exporters/stdout/stdouttrace/v1.30.0","exporters/stdout/stdouttrace/v1.31.0","exporters/stdout/stdouttrace/v1.32.0","exporters/stdout/stdouttrace/v1.33.0","exporters/stdout/stdouttrace/v1.34.0","exporters/stdout/stdouttrace/v1.35.0","exporters/stdout/stdouttrace/v1.36.0","exporters/stdout/stdouttrace/v1.37.0","exporters/stdout/stdouttrace/v1.38.0","exporters/stdout/stdouttrace/v1.39.0","exporters/zipkin/v1.21.0","exporters/zipkin/v1.22.0","exporters/zipkin/v1.23.0","exporters/zipkin/v1.23.0-rc.1","exporters/zipkin/v1.23.1","exporters/zipkin/v1.24.0","exporters/zipkin/v1.25.0","exporters/zipkin/v1.26.0","exporters/zipkin/v1.27.0","exporters/zipkin/v1.28.0","exporters/zipkin/v1.29.0","exporters/zipkin/v1.30.0","exporters/zipkin/v1.31.0","exporters/zipkin/v1.32.0","exporters/zipkin/v1.33.0","exporters/zipkin/v1.34.0","exporters/zipkin/v1.35.0","exporters/zipkin/v1.36.0","exporters/zipkin/v1.37.0","exporters/zipkin/v1.38.0","exporters/zipkin/v1.39.0","log/logtest/v0.13.0","log/logtest/v0.14.0","log/logtest/v0.15.0","log/v0.0.1-alpha","log/v0.1.0-alpha","log/v0.10.0","log/v0.11.0","log/v0.12.0","log/v0.12.1","log/v0.12.2","log/v0.13.0","log/v0.14.0","log/v0.15.0","log/v0.2.0-alpha","log/v0.3.0","log/v0.4.0","log/v0.5.0","log/v0.6.0","log/v0.7.0","log/v0.8.0","log/v0.9.0","metric/v1.21.0","metric/v1.22.0","metric/v1.23.0","metric/v1.23.0-rc.1","metric/v1.23.1","metric/v1.24.0","metric/v1.25.0","metric/v1.26.0","metric/v1.27.0","metric/v1.28.0","metric/v1.29.0","metric/v1.30.0","metric/v1.31.0","metric/v1.32.0","metric/v1.33.0","metric/v1.34.0","metric/v1.35.0","metric/v1.36.0","metric/v1.37.0","metric/v1.38.0","metric/v1.39.0","schema/v0.0.10","schema/v0.0.11","schema/v0.0.12","schema/v0.0.13","schema/v0.0.14","schema/v0.0.8","schema/v0.0.9","sdk/log/logtest/v0.13.0","sdk/log/logtest/v0.14.0","sdk/log/logtest/v0.15.0","sdk/log/v0.10.0","sdk/log/v0.11.0","sdk/log/v0.12.0","sdk/log/v0.12.1","sdk/log/v0.12.2","sdk/log/v0.13.0","sdk/log/v0.14.0","sdk/log/v0.15.0","sdk/log/v0.2.0-alpha","sdk/log/v0.3.0","sdk/log/v0.4.0","sdk/log/v0.5.0","sdk/log/v0.6.0","sdk/log/v0.7.0","sdk/log/v0.8.0","sdk/log/v0.9.0","sdk/metric/v1.21.0","sdk/metric/v1.22.0","sdk/metric/v1.23.0","sdk/metric/v1.23.0-rc.1","sdk/metric/v1.23.1","sdk/metric/v1.24.0","sdk/metric/v1.25.0","sdk/metric/v1.26.0","sdk/metric/v1.27.0","sdk/metric/v1.28.0","sdk/metric/v1.29.0","sdk/metric/v1.30.0","sdk/metric/v1.31.0","sdk/metric/v1.32.0","sdk/metric/v1.33.0","sdk/metric/v1.34.0","sdk/metric/v1.35.0","sdk/metric/v1.36.0","sdk/metric/v1.37.0","sdk/metric/v1.38.0","sdk/metric/v1.39.0","sdk/v1.21.0","sdk/v1.22.0","sdk/v1.23.0","sdk/v1.23.0-rc.1","sdk/v1.23.1","sdk/v1.24.0","sdk/v1.25.0","sdk/v1.26.0","sdk/v1.27.0","sdk/v1.28.0","sdk/v1.29.0","sdk/v1.30.0","sdk/v1.31.0","sdk/v1.32.0","sdk/v1.33.0","sdk/v1.34.0","sdk/v1.35.0","sdk/v1.36.0","sdk/v1.37.0","sdk/v1.38.0","sdk/v1.39.0","trace/v1.21.0","trace/v1.22.0","trace/v1.23.0","trace/v1.23.0-rc.1","trace/v1.23.1","trace/v1.24.0","trace/v1.25.0","trace/v1.26.0","trace/v1.27.0","trace/v1.28.0","trace/v1.29.0","trace/v1.30.0","trace/v1.31.0","trace/v1.32.0","trace/v1.33.0","trace/v1.34.0","trace/v1.35.0","trace/v1.36.0","trace/v1.37.0","trace/v1.38.0","trace/v1.39.0","v1.21.0","v1.22.0","v1.23.0","v1.23.0-rc.1","v1.23.1","v1.24.0","v1.25.0","v1.26.0","v1.27.0","v1.28.0","v1.29.0","v1.30.0","v1.31.0","v1.32.0","v1.33.0","v1.34.0","v1.35.0","v1.36.0","v1.37.0","v1.38.0","v1.39.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-24051.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}