CVE-2026-23983

A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information. The Tag endpoint (disabled by default) allows users to retrieve a list of objects associated with a specific tag. When these associated objects include Users, the API response improperly serializes and returns sensitive fields, including password hashes (pbkdf2), email addresses, and login statistics. This vulnerability allows authenticated users with low privileges (e.g., Gamma role) to view sensitive authentication data This issue affects Apache Superset: before 6.0.0. Users are recommended to upgrade to version 6.0.0, which fixes the issue or make sure TAGGING_SYSTEM is False (Apache Superset current default)

• CWE-200

• https://lists.apache.org/thread/62mgbc5hc8026skp69kb6vqozj3pr5wwMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2026/02/24/7Mailing List, Third Party Advisory

Published

Feb 24, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-23978Improper Control of Filename for Include/Require Statement i…7.5
• CVE-2026-23979Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2026-2398Authorization bypass through User-Controlled key vulnerabili…8.8
• CVE-2026-23980Improper Neutralization of Special Elements used in a SQL Co…6.5
• CVE-2026-23981An Improper Authorization vulnerability exists in Apache Sup…4.3
• CVE-2026-23982An Improper Authorization vulnerability exists in Apache Sup…6.5
• CVE-2026-23984An Improper Input Validation vulnerability exists in Apache …6.5
• CVE-2026-23985A Regular Expression Denial of Service (ReDoS) vulnerability…6.5
• CVE-2026-23986Copier is a library and CLI app for rendering project templa…7.1
• CVE-2026-23988Rufus is a utility that helps format and create bootable USB…7
• CVE-2026-23989REVA is an interoperability platform. Prior to 2.42.3 and 2.…8.1
• CVE-2026-2399CWE-22 Improper Limitation of a Pathname to a Restricted Dir…6.1