A vulnerability, which was classified as problematic, has been found in Couchbase Sync Gateway up to 3.2.5. Affected by this issue is some unknown functionality of the file sgcollect_info_options.log. The manipulation leads to missing encryption of sensitive data.
This vulnerability is handled as CVE-2025-52490. The attack needs to be approached within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
