Skip to content
OpenAdvisories
High · 7.1 CVE-2025-67745 EUVD-2025-204404

Myhoard logs backup encryption key in plain text

Published Dec 18, 2025 · Updated Dec 18, 2025 · Assigned by GitHub_M

Description

MyHoard is a daemon for creating, managing and restoring MySQL backups. Starting in version 1.0.1 and prior to version 1.3.0, in some cases, myhoard logs the whole backup info, including the encryption key. Version 1.3.0 fixes the issue. As a workaround, direct logs into /dev/null.

Affected products

VendorProductAffectedFixed
Aiven-Open myhoard >= 1.0.1, < 1.3.0 —

References