CVE-2026-108857: Insertion of Sensitive Information into Log File in Hugging Face Text Embeddings Inference

Hugging Face Text Embeddings Inference versions up to 1.9.4 contain a cleartext logging vulnerability. The router's Args struct does not have a redact attribute for the api_key, causing the API key to be logged in plaintext. Attackers who can access router logs, container output, or OTLP telemetry can extract the Bearer token and use it to call protected embedding and rerank endpoints.

Exposure of the API key in logs or telemetry can lead to unauthorized access to protected embedding and rerank endpoints. This could allow an attacker with limited access to logs or telemetry to misuse the API key, potentially leading to unauthorized data access or service misuse. The CVSS score is 4.8 (medium severity), indicating a moderate risk with local attack vector and low complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to router logs, container output, and telemetry data to trusted personnel only to prevent unauthorized recovery of the API key.