CVE-2025-62879

Published: Mar 4, 2026Modified: Jun 17, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.

Affected (4)

Products: Suse: Rancher Backup And Restore Operator

Suse

1 product

Rancher Backup And Restore Operator

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Suse Rancher Backup And Restore Operator	From 6.0.0 to 6.0.3
Suse Rancher Backup And Restore Operator	From 7.0.0 to 7.0.5
Suse Rancher Backup And Restore Operator	From 8.0.0 to 8.1.2
Suse Rancher Backup And Restore Operator	From 9.0.0 to 9.0.1

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62879

Source: meissner@suse.de

Third Party Advisory

https://github.com/advisories/GHSA-wj3p-5h3x-c74q

Source: meissner@suse.de

Third Party Advisory

Timeline

No history available yet.