CVE-2026-12947 is a vulnerability in IBM App Connect Enterprise that causes potentially sensitive information to be written into log files. These log files can be read by local users, potentially exposing confidential data. The affected versions include 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27. The vulnerability is categorized as CWE-532, which involves the insertion of sensitive information into log files. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

Sensitive information exposure through log files can lead to unauthorized access to confidential data by local users. This compromises confidentiality but does not affect integrity or availability. The vulnerability has a high CVSS score (7.5) due to its network attack vector and no required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to log files to trusted users only and monitor access permissions to minimize risk.