CVE-2026-94593: Armatura LLC Armatura One Insertion of Sensitive Information into Log File
Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Armatura Oneto a version that resolves this vulnerability.Fixed in V4.6.1_USA - Upgrade
Upgrade
Armatura Oneto a version that resolves this vulnerability.Fixed in V4.7.2
Event History
Frequently Asked Questions
Who is exposed to this issue?
Armatura One hosts are exposed if their backup or restore routine runs and writes the database connection command to a host log file. An attacker or other user must have access to the server operating system to obtain the logged credential.
What does an attacker need to exploit the disclosed credential?
The attacker needs access to the server operating system to read the log file containing the plain-text superuser password. The disclosed credentials can then be used to access the database.
How can administrators determine whether they are affected?
Review logs produced by Armatura One backup and restore operations for full database connection commands containing a superuser password in plain text. The presence of such a command indicates that credentials have been exposed in the host log.