CVE-2026-66379

Authenticated users can access private Puppet module metadata without having the necessary repository read permissions, potentially exposing sensitive information. This vulnerability could lead to unauthorized disclosure of proprietary data, making it critical for organizations using Puppet to prioritize remediation. Users managing Puppet environments should assess their access controls to mitigate this risk.