CVE-2026-10569 describes an exposure of sensitive information vulnerability in IBM UrbanCode Deploy and IBM DevOps Deploy products. Specifically, sensitive data may be exposed through plugin output logs in affected versions. This could allow an attacker with log access to retrieve sensitive values related to deployment steps. The CVSS 3.1 base score is 4.3, indicating a medium severity vulnerability with network attack vector, low attack complexity, requiring low privileges, no user interaction, and limited confidentiality impact. No official remediation or patch information is currently available.

The vulnerability allows unauthorized disclosure of sensitive information via plugin output logs. This could lead to leakage of sensitive deployment-related data if an attacker gains access to these logs. There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to plugin output logs to trusted users only to prevent unauthorized information disclosure.