CVE-2026-44934

Exposed tokens in SUSE Rancher AI Agent logs

State: Published
Severity: 7.0 High
Published: Jul 6, 2026
Updated: Jul 6, 2026
Reserved: May 8, 2026

Description

A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, allowing local attackers to misuse respective gained data or credentials.

Scores

CVSS	Score	Vector	Source
4.0	7.0 High	CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H	suse

Weaknesses

CWE-215 Insertion of sensitive information into debugging code

Affected Products

Product	Versions
RancherSUSE	1.0.0 to before 1.0.2Affected

References

https://github.com/rancher/rancher-ai-agent/security/advisories/GHSA-5r2r-h824-fr5vvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.