CVE-2026-44940: Service token exposure and potential privilege escalation in SUSE Observability
Published Sep 17, 2026
·Updated
The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them securely. An attacker with minimal access could obtain the token to gain unauthorized access or escalate privileges within the observability environment.
Affected Software
1 affected component
SUSE Observability
Event History
Sep 17, 2026
CVE Published
via MITRE·06:43 AM
Data Sourced
via MITRE·06:43 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of attacker access is required?
The attack vector is network-based and requires low privileges. User interaction is also required for exploitation.
2
What can an attacker do with an exposed token?
An attacker who obtains the token may gain unauthorized access or potentially escalate privileges within the observability environment. The reported impact is limited to confidentiality; integrity and availability impacts are not indicated.