Intel

AIKIDO-2026-10082

dwave-cloud-client is vulnerable to Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Jan 26, 2026

20

Low Risk

This Affects:

PYTHONdwave-cloud-client
0.0.1 - 0.14.3
Fixed in 0.14.4
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to sensitive information exposure, as secrets could be written to logs.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

dwave-cloud-client is vulnerable to Insertion of Sensitive Information into Log File in versions 0.0.1 - 0.14.3.

How to fix this

Upgrade the dwave-cloud-client library to the patch version.