CVE-2026-56457 describes a vulnerability in HCL DevOps Deploy / HCL Launch where sensitive information is inserted into output logs, potentially exposing confidential data to an attacker with log access. The vulnerability is categorized as CWE-532. The CVSS vector indicates network attack vector, low attack complexity, requiring low privileges, no user interaction, and impacts confidentiality only with a low impact. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

The vulnerability allows disclosure of sensitive information through output logs. This could lead to unauthorized access to confidential data if an attacker can access the logs. The impact is limited to confidentiality with no integrity or availability effects reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to logs to authorized personnel only to reduce exposure risk.