A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information. The Tag endpoint (disabled by default) allows users to retrieve a list of objects associated with a specific tag. When these associated objects include Users, the API response improperly serializes and returns sensitive fields, including password hashes (pbkdf2), email addresses, and login statistics. This vulnerability allows authenticated users with low privileges (e.g., Gamma role) to view sensitive authentication data This issue affects Apache Superset: before 6.0.0. Users are recommended to upgrade to version 6.0.0, which fixes the issue or make sure TAGGING_SYSTEM is False (Apache Superset current default)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve
    sensitive user information. The Tag endpoint (disabled by default) allows users to retrieve a list of
    objects associated with a specific tag. When these associated objects include Users, the API response
    improperly serializes and returns sensitive fields, including password hashes (pbkdf2), email addresses,
    and login statistics. This vulnerability allows authenticated users with low privileges (e.g., Gamma role)
    to view sensitive authentication data This issue affects Apache Superset: before 6.0.0. Users are
    recommended to upgrade to version 6.0.0, which fixes the issue or make sure TAGGING_SYSTEM is False
    (Apache Superset current default) (CVE-2026-23983)

ID	Name	Product	Family	Type	Severity
455521	Echo: apache-superset: security update to 6.0.0	Tenable Cloud Security	Echo Local Security Checks	Local	low
455521	Echo: apache-superset: security update to 6.0.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	low
437997	SCA: security update for apache-superset (GHSA-h294-8fxm-m2pj)	Tenable Cloud Security	SCA Checks	Local	low
437997	SCA: security update for apache-superset (GHSA-h294-8fxm-m2pj)	Tenable Self-Hosted Container Security	SCA Checks	Local	low

Detections

Analytics

CVE-2026-23983

low

Tenable Plugins

low

low

low

low