THREAT OPS › Threat News › [NVD] CVE-2026-77970 — Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists.
sensitive_attributes :redact and :ignore
[NVD] CVE-2026-77970 — Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitive_attributes :redact and :ignore
CVE-2026-77970 CVSS: None Published: 2026-08-30T01:20:29.773
Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists.
sensitive_attributes :redact and :ignore only act on the tracked resource's top-level attributes.
MITRE ATT&CK techniques
- CredentialsT1589.001
Indicators of compromise
- CVE-2026-77970cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-77970