CVE-2026-29184
EUVD-2026-1014407.03.2026, 15:15
Backstage is an open framework for building developer portals. Prior to version 3.1.4, a malicious scaffolder template can bypass the log redaction mechanism to exfiltrate secrets provided run through task event logs. This issue has been patched in version 3.1.4.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linuxfoundation | backstage\/plugin-scaffolder-backend | 𝑥 < 3.1.4 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| backstage | backstage | 𝑥 < 3.1.4 | CNA |
Common Weakness Enumeration