CVE-2025-62879
EUVD-2025-20827004.03.2026, 16:16
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| suse | rancher_backup_and_restore_operator | 6.0.0 ≤ 𝑥 < 6.0.3 |
| suse | rancher_backup_and_restore_operator | 7.0.0 ≤ 𝑥 < 7.0.5 |
| suse | rancher_backup_and_restore_operator | 8.0.0 ≤ 𝑥 < 8.1.2 |
| suse | rancher_backup_and_restore_operator | 9.0.0 ≤ 𝑥 < 9.0.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| suse | rancher | 9.0.0 ≤ 𝑥 < 9.0.1 | CNA |
| suse | rancher | 8.0.0 ≤ 𝑥 < 8.1.2 | CNA |
| suse | rancher | 7.0.0 ≤ 𝑥 < 7.0.5 | CNA |
| suse | rancher | 6.0.0 ≤ 𝑥 < 6.0.3 | CNA |
Common Weakness Enumeration