AIKIDO-2026-10313

TL;DR

Affected versions of the software are vulnerable to insertion of sensitive information into log files due to insufficient sanitization of data written to trace and execution logs. Under certain conditions, credentials, authentication headers, and service keys may be recorded in logs in plaintext. An attacker with access to these logs could retrieve sensitive information and potentially use it to access protected services or accounts. The issue is addressed by masking sensitive values in logs and improving the handling of credentials in logging and database interactions.