Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 14:39:30 +0000 CVE-2026-9699 — Mattermost Agents plugin logs unsanitized OpenAI API keys on authentication errors https://cve.radiocsirt.org/vuln/cve-2026-9699 <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost Plugins versions &lt;=11.6 10.18.11 11.3.6 11.6.5.0 fail to sanitize error responses from the OpenAI API before logging, which allows a user with access to server logs or support packets to obtain a valid or partially reconstructable OpenAI API key via inspection of mattermost.log entries generated during authentication failures. Mattermost Advisory ID: MMSA-2026-00609</p> <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost Plugins versions &lt;=11.6 10.18.11 11.3.6 11.6.5.0 fail to sanitize error responses from the OpenAI API before logging, which allows a user with access to server logs or support packets to obtain a valid or partially reconstructable OpenAI API key via inspection of mattermost.log entries generated during authentication failures. Mattermost Advisory ID: MMSA-2026-00609</p> https://cve.radiocsirt.org/vuln/cve-2026-9699