CVE-2026-82723 | team-alembic ash_authentication up to 4.14.x/5.0.0-rc.0 audit_log Actor log file

September 17, 2026 Yanac

A vulnerability classified as problematic has been found in team-alembic ash_authentication up to 4.14.x/5.0.0-rc.0. The impacted element is the function AshAuthentication.AddOn.AuditLog.Auditor.build_extra_data of the component audit_log. The manipulation of the argument Actor leads to sensitive information in log files.

This vulnerability is documented as CVE-2026-82723. The attack needs to be performed locally. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More