OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assum…

CVE-2026-45678 affects OpenTelemetry eBPF Instrumentation prior to version 0.9.0. The vulnerability exists in the Postgres protocol parser which incorrectly assumes BIND message payloads contain valid NUL-terminated portal names. Attackers can exploit this by sending crafted empty or unterminated payloads, causing the application to slice beyond the captured buffer boundaries and panic. This buffer overflow condition could lead to denial of service attacks. The issue has been resolved in version 0.9.0 of the OpenTelemetry eBPF Instrumentation package.