WAL-G before 1.1, when a non-libsodium build (e.g., one of the official binary releases published as GitHub Releases) is used, silently ignores the libsodium encryption key and uploads cleartext backups.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00834·Published 2021-08-12·Fixed in 1.1CWE-754