CVE-2026-110975 Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

CVE-2026-110975

A flaw in Kruize Autotune allows for datasources credential disclosure due to a lack of an authentication layer on its REST API. Specifically, the list-datasources (GET /datasources) and datasource-metadata endpoints serialize datasource objects using a default Gson configuration without a field-...