CVE-2025-67745

Published: Dec 18, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

MyHoard is a daemon for creating, managing and restoring MySQL backups. Starting in version 1.0.1 and prior to version 1.3.0, in some cases, myhoard logs the whole backup info, including the encryption key. Version 1.3.0 fixes the issue. As a workaround, direct logs into /dev/null.

Affected (1)

Products: Aiven: Myhoard

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Aiven Myhoard	From 1.0.1 to 1.3.0

Related CWEs

Transmission of Private Resources into a New Sphere ('Resource Leak')

The product makes resources available to untrusted parties when those resources are only intended to be accessed by the product.

References (2)

https://github.com/Aiven-Open/myhoard/commit/fac89793bfc8c81ae040aadf5292f5d0100b6640

Source: security-advisories@github.com

Patch

https://github.com/Aiven-Open/myhoard/security/advisories/GHSA-v42r-6hr9-4hcr

Source: security-advisories@github.com

Vendor Advisory

Timeline

No history available yet.