CVE-2026-41018

The Elasticsearch logging provider is vulnerable to credential exposure when a host URL includes embedded credentials (e.g., https://user:[email protected]:9200). The provider writes the full URL, including these credentials, into task logs , allowing any user with task-log read permiss...