Sensitive Data Exposure in Gryph Security Layer for AI Coding Agents

CVE-2026-45046

What is CVE-2026-45046?

Gryph, a security layer for AI coding agents, has a vulnerability that allows sensitive file content to be logged in a local sqlite database due to improper logging configurations. Although the documentation indicates a minimal default logging level, it actually utilizes a standard level, which records sensitive information in its payload. This flaw can lead to unauthorized access to potentially sensitive data, violating Gryph's security protocols. The issue has been resolved in version 0.7.0, highlighting the importance of keeping software up to date to mitigate such risks.

References