MEDIUM
Rancher Backup Operator pod's logs leak S3 tokens
Published Mar 4, 2026
6.8
MEDIUMCVSS 3.1
EPSS 0.35%
Description
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.
Affected products
-
Affected
- ≥ 6.0.0, < 6.0.3
- ≥ 7.0.0, < 7.0.5
- ≥ 8.0.0, < 8.1.2
- ≥ 9.0.0, < 9.0.1
OR
- ≥ 6.0.0 · < 6.0.3
- ≥ 7.0.0 · < 7.0.5
- ≥ 8.0.0 · < 8.1.2
- ≥ 9.0.0 · < 9.0.1
No data.
No Red Hat product state for this CVE.
github.com/rancher/backup-restore-operator
Go
Introduced 0 Fixed not fixed
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/rancher/backup-restore-operator | 0 | not fixed |
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62879 Third Party Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-208270 Advisory
- https://github.com/advisories/GHSA-wj3p-5h3x-c74q AdvisoryThird Party Advisory
- https://github.com/rancher/backup-restore-operator/security/advisories/GHSA-wj3p-5h3x-c74q
- https://nvd.nist.gov/vuln/detail/CVE-2025-62879
| Link | Providers | Tags |
|---|---|---|
| https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62879 | Third Party Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-208270 | Advisory | |
| https://github.com/advisories/GHSA-wj3p-5h3x-c74q | AdvisoryThird Party Advisory | |
| https://github.com/rancher/backup-restore-operator/security/advisories/GHSA-wj3p-5h3x-c74q | ||
| https://nvd.nist.gov/vuln/detail/CVE-2025-62879 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner suse
Published Mar 4, 2026
Updated Mar 4, 2026
Reserved Oct 24, 2025
Link CVE-2025-62879
CISA Vulnrichment
Updated Mar 4, 2026
Red Hat
No data
GitHub
Link GHSA-WJ3P-5H3X-C74Q