Skip to content
Sign in
6.8 Medium

CVE-2025-62879 A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both…

Description

A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.

Affected products and versions

Product Affected versions Fixed in
Rancher 9.0 9.0.0 → < 9.0.1 9.0.1
Rancher 8.0 8.0.0 → < 8.1.2 8.1.2
Rancher 7.0 7.0.0 → < 7.0.5 7.0.5
Rancher 6.0 6.0.0 → < 6.0.3 6.0.3

Other CVEs of Rancher

The 86 CVEs of Rancher →
CVE-2026-88811 Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud… 9.1 Critical CVE-2026-88810 A privilege escalation issue was discovered in Rancher Manager's role-based access control 7.2 High CVE-2026-88809 A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy) 7.6 High CVE-2026-94290 SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent… 9.1 Critical
Track this CVE