CVE-2024-58269

Rancher exposes sensitive information through audit logs

State: Published
Severity: 4.3 Medium
Published: Oct 29, 2025
Updated: Oct 29, 2025
Reserved: Oct 8, 2025

Description

A vulnerability has been identified in Rancher Manager, where sensitive information, including secret data, cluster import URLs, and registration tokens, is exposed to any entity with access to Rancher audit logs.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	suse

Weaknesses

CWE-532 Insertion of Sensitive Information into Log File

Affected Products

Product	Versions
rancherSUSE	before 0.0.0-20251013203444-50dc516a19eaAffected

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58269
https://github.com/rancher/rancher/security/advisories/GHSA-mw39-9qc2-f7mg

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.