CVE-2026-46668 is a low-severity vulnerability in SpiceDB, an open-source database system, affecting versions from 1.15.0 to before 1.52.0. The issue involves improper cache reuse with caveat structures containing nested lists. This vulnerability was patched in version 1.52.0. The CVSS score for this vulnerability is 2.3, indicating a low severity.
SpiceDB, an open-source database system for managing security-critical application permissions, logs the full datastore DSN, including plaintext passwords, at log level info during startup in versions 1.49.0 through 1.51.0. This issue is fixed in version 1.51.1. Users unable to upgrade immediately can change the log level to warn or error as a workaround.
