CVE-2026-105707 | uptrace up to 2.1.0-beta.8 pkg/org/user_handler.go Login information exposure (Issue 600)

October 5, 2026 Yanac

A vulnerability classified as problematic has been found in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user_handler.go. The manipulation leads to information exposure through error message.

This vulnerability is traded as CVE-2026-105707. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More