Skip to content
Threat Feed

Tag

Sensitive-Data-Exposure

1 brief RSS
high advisory

Valtimo Sensitive Data Exposure via Excessive HTTP Request/Response Logging (CVE-2026-44516)

The `LoggingRestClientCustomizer` in Valtimo's `web` module automatically intercepts all outgoing HTTP calls and logs the full request/response body and headers, potentially exposing sensitive information like credentials, personal data, and session tokens via error messages logged at ERROR level (CVE-2026-44516).

Valtimo sensitive-data-exposure logging
1r