CVE-2026-44934
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In SUSE Rancher AI Agent versions 1.0 before 1.0.2, when DEBUG log level is set, API keys or LLM response text with potentially sensitive data may be leaked into log files. A local attacker could misuse the obtained data or credentials.
Risk Assessment
The risk involves a local attacker potentially capturing sensitive data such as API keys, which could lead to unauthorized access to systems or services.
Recommendation
It is recommended to immediately upgrade SUSE Rancher AI Agent to version 1.0.2 or later and avoid setting DEBUG log level in production environments.
Original NVD description (English source)
A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, allowing local attackers to misuse respective gained data or credentials.