S3 Token Leakage Vulnerability in Rancher Backup Operator by SUSE
CVE-2025-62879

6.8MEDIUM

Key Information:

Vendor

Suse
Status
Rancher
Vendor
CVE Published:
4 March 2026

What is CVE-2025-62879?

A security flaw has been detected in the Rancher Backup Operator that exposes S3 tokens, including accessKey and secretKey, in the logs of the rancher-backup-operator pod. This vulnerability could permit unauthorized access to cloud storage resources, posing a significant threat to the confidentiality and integrity of sensitive data managed by the operator. Monitoring and addressing this issue promptly is crucial for securing cloud environments against potential exploits.

Affected Version(s)

Rancher 9.0.0 < 9.0.1

Rancher 8.0.0 < 8.1.2

Rancher 7.0.0 < 7.0.5

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62879
https://github.com/advisories/GHSA-wj3p-5h3x-c74q

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.