CVE-2026-44934: CVE-2026-44934: güvenlik açığı

Açıklama (NVD)

A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, allowing local attackers to misuse respective gained data or credentials.

Özet bilgiler

CVSS v4.0

7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%0,15 (yüzdelik 4)

CWE

CWE-215

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• CWE-215