Threats affecting pkg:golang/github.com/open-telemetry/opentelemetry-go/sdk/log

CVE-2026-81872 is a medium severity availability vulnerability in the open-telemetry opentelemetry-go SDK. The BatchingProcessor in sdk/log can enter a tight CPU loop when the asynchronous export buffer is full and the exporter is backpressured. This causes repeated immediate export retries, leading to CPU exhaustion and denial of service in the affected application. The issue affects versions prior to 0.21.0. No official patch or fix status is provided in the input data.