OpenTelemetry JS Prometheus exporter: a malformed request URI crashes the whole Node.js process

Impact

The exporter's metrics endpoint - by default listening on 0.0.0.0:9464 - parses the request URL with no error handling, so a single request with an invalid URI raises an uncaught TypeError and terminates the Node.js process. It is not just the metrics server that dies: the entire service hosting the exporter goes with it, which is why this rates a straight remote availability kill with no authentication. On a fleet, anything scraped by Prometheus is generally reachable from the cluster network, so any tenant pod or anyone on the monitoring path can kill Node-based control-plane services, gateways or serving sidecars repeatedly, and a supervisor that restarts them just gets killed again.

Who can reach it

Anyone with network reach to the exporter's metrics port (default 0.0.0.0:9464). No authentication is required - the endpoint has none.

What to do

Upgrade @opentelemetry/exporter-prometheus (and any bundling package such as sdk-node or auto-instrumentations-node) to 0.217.0 or later and restart each affected service. Until the rebuild lands, bind the exporter to localhost or restrict port 9464 with a NetworkPolicy or firewall rule so only the Prometheus scraper can reach it.

References

Related entries

• Suricata: unbounded NFS parser state lets crafted traffic exhaust sensor memoryCVE-2026-45766 · Suricata (NFS application-layer parser)High
• Airflow FTP provider: FTPS data channel sent in cleartext because PROT P was never issuedCVE-2026-49486 · Apache Airflow FTP provider (FTPSHook data channel)High
• rclone (local backend, --links): When rclone copies from an untrusted remote with --links, it recreates symlinksCVE-2026-54572 · rclone (local backend, --links)High
• Jenkins Script Security Plugin: Groovy sandbox escape via AST annotation extensions memberCVE-2026-57281 · Jenkins Script Security Plugin (Groovy sandbox, AST transformation annotations)High
• NVIDIA AIStore: Promote API reads any file reachable by the target processCVE-2026-65161 · NVIDIA AIStore (Promote API, absolute source path)High
• Airflow Backfill API: any Dag editor can read and cancel backfills belonging to other DagsCVE-2026-68968 · Apache Airflow Backfill API (authorization dependency id parsing)High