CVE-2026-44934

A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, allowing local attackers to misuse respective gained data or credentials.

Score

CVSS 4.0 7.0 High

Status

Awaiting Analysis - meissner@suse.de

Published

2026-07-06

Last modified

2026-10-25

Weaknesses

CWE-215

Affected products

• Rancher (Suse)

References

• https://github.com/rancher/rancher-ai-agent/security/advisories/GHSA-5r2r-h824-fr5v