CVE-2026-44934: Exposed tokens in SUSE Rancher AI Agent logs
Published Jul 6, 2026
·Updated
A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, allowing local attackers to misuse respective gained data or credentials.
Affected Software
1 affected component
SUSE Rancher AI Agent><1.0.2
Event History
Jul 6, 2026
CVE Published
via MITRE·08:45 AM
Data Sourced
via MITRE·08:45 AM
DescriptionWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-44934?
CVE-2026-44934 has a severity rating of high with a CVSS score of 7.
2
How do I fix CVE-2026-44934?
To mitigate CVE-2026-44934, ensure that the DEBUG loglevel is not enabled in SUSE Rancher AI Agent versions prior to 1.0.2.
3
What kind of data can be leaked by CVE-2026-44934?
CVE-2026-44934 can leak API keys and potentially sensitive LLM response text into logfiles.
4
Who is affected by CVE-2026-44934?
Users of SUSE Rancher AI Agent versions before 1.0.2 are affected by CVE-2026-44934.
5
Can local attackers exploit CVE-2026-44934?
Yes, local attackers can exploit CVE-2026-44934 to misuse data or credentials exposed in the logfiles.