Sensitive Information Leakage in Apache Answer from Apache Software Foundation

CVE-2026-64943

What is CVE-2026-64943?

The Apache Answer product has a vulnerability that allows the insertion of sensitive information into log files. Specifically, when a user makes authenticated requests, full API keys are recorded in application logs. This poses a risk as anyone with access to these logs can potentially recover and utilize active bearer credentials. To mitigate this risk, users are strongly advised to upgrade to version 2.0.3, which implements the necessary fixes to prevent sensitive data exposure.

References