A vulnerability marked as problematic has been reported in Apache Superset up to 5.x. Affected is an unknown function of the component Tag Endpoint. This manipulation causes information disclosure.

This vulnerability appears as CVE-2026-23983. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.