CVE-2026-44213 | open-telemetry opentelemetry-dotnet-contrib up to 1.0.x Instana API INSTANA_ENDPOINT_PROXY certificate validation (GHSA-wfr5-454p-mjc2)

A vulnerability has been found in open-telemetry opentelemetry-dotnet-contrib up to 1.0.x and classified as problematic. Impacted is an unknown function of the component Instana API. Performing a manipulation of the argument INSTANA_ENDPOINT_PROXY results in improper certificate validation.

This vulnerability is known as CVE-2026-44213. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.