In plain language
What this advisory means
A flaw in Cisco RoomOS's logging system can let someone with local access and low-level privileges see sensitive data, like login details, by turning on detailed logging and reading the logs. Cisco has fixed this issue with software updates. There are no ways to work around the problem without updating the software.
Technical explanation
How the issue affects the environment
The vulnerability lies in Cisco RoomOS's logging subsystem where sensitive information is recorded when extended logging is enabled. An authenticated attacker with local access and low privileges can activate this detailed logging level and collect system log files containing sensitive data such as user login credentials. The issue stems from excessive logging of sensitive information (CWE-532). Cisco has released fixed versions of RoomOS releases including 11.39.1.3, 26.7.2.2 and subsequent releases, which correct this problem. No workaround mitigations are available, so updating to a fixed release is strongly recommended. The CVE identifier for this defect is CVE-2026-20289.
Operational impact
Why teams should care
If exploited, an attacker with limited access can obtain sensitive information, including users' login credentials, potentially leading to unauthorized access to systems and data. This situation could damage customer trust and may disrupt operations depending on the confidentiality of the exposed information. Organizations using affected Cisco RoomOS versions should upgrade promptly to prevent such data leaks.
Immediate action
To fully address this vulnerability, customers must upgrade their Cisco RoomOS software to the fixed releases identified by Cisco. Cisco strongly recommends applying these updates immediately as no workarounds exist.
Affected and fixed releases
Temporary risk reduction
There are no available workarounds to mitigate this vulnerability. The only effective remediation is to upgrade to a fixed software release.
Evidence and validation checklist
- Cisco PSIRT Advisory cisco-sa-roomos-infodisc-qBXjfmWm
- CVE-2026-20289 announcement
- Details of vulnerability being due to sensitive information logged when extended logging enabled
- No workaround available
- Fixed versions listed as RoomOS 11.39.1.3 (on-premises) and 26.7.2.2 (cloud)
Authoritative reference
Cisco PSIRT Advisories
QCS detected and normalized this record from the official source. Vendor guidance remains authoritative.