CWE-526 vulnerabilities

CVE-2026-54146 is a vulnerability in the openhuman agent harness for macOS versions from 0.53.15 up to but not including 0.57.5. The issue involves the cleartext storage of the OPENHUMAN_CORE_TOKEN bearer credential in the process environment, which can be read by other processes running under the same user via macOS's KERN_PROCARGS2 interface. This allows unauthorized access to the core JSON-RPC service with desktop frontend privileges, enabling attackers to read sensitive data, invoke privileged actions, and disrupt services without elevated system permissions. The vulnerability affects both Intel and Apple Silicon macOS systems and is fixed in version 0.57.5.

CVE-2026-116246 is a vulnerability in pgAdmin 4 before version 9.19 where server passwords were stored in the process environment variables and not removed afterwards. This allowed other users' processes to inherit these passwords, potentially enabling unauthorized connections using another user's saved password. The issue was fixed in version 9.19 by isolating the password environment to only the specific process that requires it.

Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) in Elastic Cloud on Kubernetes (ECK) can lead to information disclosure via Retrieve Embedded Sensitive Data (CAPEC-37). When ECK reconciles a Fleet Server resource that authenticates to Elasticsearch with a service account token, the token is written into the generated workload specification in cleartext rather than being referenced from the Kubernetes Secret that ECK maintains for the other credentials on the same path. Any principal able to read workload specifications in the affected namespace can therefore read a live Elasticsearch credential, even when Kubernetes RBAC does not grant that principal access to Secrets.

CVE-2026-49377 is a medium severity vulnerability in JetBrains TeamCity before version 2025.11.2. It involves the exposure of sensitive data through default agent parameters. The vulnerability is identified as CWE-526, which relates to exposure of sensitive information. There is no official patch or remediation level provided yet, and no known exploits in the wild have been reported. The CVSS score is 4.3, indicating a medium impact primarily due to confidentiality loss without impact on integrity or availability.

python-utcp is the python implementation of UTCP. Prior to 1.1.3, _prepare_environment() in cli_communication_protocol.py passes a full copy of os.environ to every CLI subprocess. When combined with CVE-2026-45369, an attacker can exfiltrate all process-level secrets in a single tool call. This vulnerability is fixed in 1.1.3.

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the execute_command function in shell_tools.py calls os.path.expandvars() on every command argument at line 64, manually re-implementing shell-level environment variable expansion despite using shell=False (line 88) for security. This allows exfiltration of secrets stored in environment variables (database credentials, API keys, cloud access keys). The approval system displays the unexpanded $VAR references to human reviewers, creating a deceptive approval where the displayed command differs from what actually executes. This vulnerability is fixed in 1.5.128.

IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that could aid in further attacks against the system.

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.

Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap&Sign App allows Password Recovery Exploitation, Functionality Misuse. This issue affects Tap&Sign App: before V.1.025.

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user.

A vulnerability was found in Keycloak. Admin users may have to access sensitive server environment variables and system properties through user-configurable URLs. When configuring backchannel logout URLs or admin URLs, admin users can include placeholders like ${env.VARNAME} or ${PROPNAME}. The server replaces these placeholders with the actual values of environment variables or system properties during URL processing.