CVE-2026-44934

Severity CVSS v4.0:

HIGH

Type:

Unavailable / Other

Publication date:

06/07/2026

Last modified:

06/07/2026

Description

A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, allowing local attackers to misuse respective gained data or credentials.

Impact

Vector 4.0

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H CVSS v4.0 Severity and Metrics:

Base Score: 7.00 HIGH
Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

Attack Vector (AV): Local
Attack Complexity (AC): Low
Attack Requirements (AT): Present
Privileges Required (PR): High
User Interaction (UI): None
Confidentiality (VC): High
Integrity (VI): None
Availability (VA): None
Confidentiality (SC): High
Integrity (SI): High
Availability (SA): High

Base Score 4.0

7.00

Severity 4.0

HIGH

References to Advisories, Solutions, and Tools

https://github.com/rancher/rancher-ai-agent/security/advisories/GHSA-5r2r-h824-fr5v