← back
CVE-2025-62879

Rancher Backup Operator pod's logs leak S3 tokens

CVSS 6.8 MEDIUMEPSS 0.3%CWE-532
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected products
SUSE · Rancher

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62879https://github.com/advisories/GHSA-wj3p-5h3x-c74q