Executive brief
Trino is a high-performance distributed SQL engine used for analyzing massive datasets. A security flaw in the Iceberg connector allows users with basic data-writing permissions to view sensitive storage credentials, such as AWS S3 access keys, in plain text. This could allow an authorized user to gain unauthorized access to the underlying data storage, potentially leading to large-scale data theft or exposure.
Technical details
A vulnerability exists in Trino's Iceberg connector when configured with a REST catalog using static or vended credentials. When a user performs write operations or table maintenance, the storage credentials (such as AWS S3 access keys) are serialized into the 'query JSON' metadata used for performance troubleshooting. Any user with SQL-level write privileges can access this JSON via the Trino UI or API endpoints (/v1/query/ or /ui/api/query/), allowing them to retrieve cleartext credentials. This is classified as an improper removal of sensitive information (CWE-212) and cleartext storage (CWE-312). The issue is resolved in Trino version 480.
Affected products
- trinodb Trino >= 439, < 480
Timeline
- 2026-03-24: patched: Version 480 released
- 2026-03-27: advisory: Vendor security advisory published
- 2026-03-31: disclosed: CVE published to NVD