diff --git a/internal/api/state_marshaler.go b/internal/api/state_marshaler.go
index d90ee50bf..1b6e4be1a 100644
--- a/internal/api/state_marshaler.go
+++ b/internal/api/state_marshaler.go
@@ -39,7 +39,8 @@ func (m *jsonapiMarshaler) toState(from *state.Version, r *http.Request) (*types
 			case "outputs":
 				var include []any
 				for _, out := range from.Outputs {
-					include = append(include, m.toOutput(out, true))
+					// do not scrub sensitive values for included outputs
+					include = append(include, m.toOutput(out, false))
 				}
 				opts = append(opts, jsonapi.MarshalInclude(include...))
 			}