A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3. Thanks to william_goodfellow for reporting this vulnerability.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the
    /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace
    data stored in S3. Thanks to william_goodfellow for reporting this vulnerability. (CVE-2026-28377)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the     /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace     data stored in S3. Thanks to william_goodfellow for reporting this vulnerability. (CVE-2026-28377)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
465277	Echo: github.com/grafana/tempo: security update to 2.10.3	Tenable Cloud Security	Echo Local Security Checks	Local	high
465277	Echo: github.com/grafana/tempo: security update to 2.10.3	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
441441	SCA: security update for github.com/grafana/tempo (GHSA-ffqx-q65f-36jf)	Tenable Cloud Security	SCA Checks	Local	high
441441	SCA: security update for github.com/grafana/tempo (GHSA-ffqx-q65f-36jf)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
304006	Linux Distros Unpatched Vulnerability : CVE-2026-28377	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-28377

high

Tenable Plugins

high

high

high

high

high