OpenBao Agent Writes Secrets to Stdout
CVE-2026-77285
OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode
#cwe-532
共收录 246 条相关情报。
← 返回所有主题OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys...
CVE-2026-95815
OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as pub
OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as public diagnostic data. Attackers who obtain diagnostic arch...
CVE-2026-95815
OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as pub
Dell Command Powershell Provider (DCPP), versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local...
CVE-2026-49810
Dell Command Powershell Provider (DCPP), versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL...
CVE-2026-93982
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plain
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with a...
CVE-2026-93982
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plain
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application...
CVE-2026-92758
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive
Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyter_server/log.py copies the Referer header into a JSON ...
CVE-2026-86049
Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jup
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
CVE-2026-81870
### Summary OpenTelemetry Go versions 1.5.0 through 1.44.0 can include trace exporter endpoint configuration in an inte
Jupyter Server: 5xx request logging leaks token-bearing Referer header values
CVE-2026-86049
### Summary When a request returns a 500, `jupyter_server/log.py` logs a small JSON block of request headers. The Ref
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure...
CVE-2026-92758
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive
Insertion of Sensitive Information into Log File vulnerability in team-alembic AshAuthentication allows disclosure of user password digests to readers of the audit store. The a...
CVE-2026-82723
Insertion of Sensitive Information into Log File vulnerability in team-alembic AshAuthentication allows disclosure of us
admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON re...
CVE-2026-92918
admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events
OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnost...
CVE-2026-81870
OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider em
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in...
CVE-2026-73457
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI)
On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user...
CVE-2026-73442
On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged i
Insertion of sensitive information into log file in the slow query logging feature in Devolutions...
CVE-2026-92237
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log...
CVE-2026-92237
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2
On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) ser...
CVE-2026-73467
On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal A
On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard d...
CVE-2026-73466
On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to lo