CVE-2021-27026: Puppet

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged

Affected products

• Puppet Puppet: from 2021.0.0, before 2021.4.0 (fixed in 2021.4.0)
• Puppet Puppet Connect: before 0.4.0 (fixed in 0.4.0)
• Puppet Puppet Enterprise: before 2019.8.9 (fixed in 2019.8.9)

Published 2021-11-18. Last modified 2026-06-17.