CVE-2026-44934: Rancher 1.0.0 to before 1.0.2

Affected technology

Rancher · 1.0.0 to before 1.0.2
SUSE

Description’s affected range: before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · High privileges required · No user interaction required

What an attacker can do

The source says a information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, allowing local attackers to misuse respective gained data or credentials. Vendor/CNA’s CVSS 4.0 assessment (base score 7.0/10) rates confidentiality impact as high; integrity and availability impact as none.