CVE-2025-46808: Sensitive information is leaked into NeuVector’s manager container logs
Published Sep 9, 2026
·Updated
An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log
This issue affects neuvector: before 5.4.5.
Affected Software
1 affected component
neuvector<5.4.5
Event History
Sep 9, 2026
CVE Published
via MITRE·08:25 AM
Data Sourced
via MITRE·08:25 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
NeuVector manager versions before 5.4.5 are affected. The exposed information is written to the manager container's logs.
2
What access does an attacker need to exploit this issue?
The provided vector indicates network reachability, low attack complexity, low privileges, and user interaction are required. Successful exploitation can disclose sensitive information, with no stated integrity or availability impact.
3
How can I determine whether I may already be affected?
Check whether the deployed NeuVector manager version is earlier than 5.4.5, then review manager container logs for sensitive information that may have been recorded.