What’s Vulnerable › Vulnerabilities

CVE-2024-58269: Rancher exposes sensitive information through audit logs

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-29 · updated 2026-10-02
• Weakness: CWE-532

Description

A vulnerability has been identified in Rancher Manager, where sensitive information, including secret data, cluster import URLs, and registration tokens, is exposed to any entity with access to Rancher audit logs.

Affected products

• SUSE Rancher: before 0.0.0-20251013203444-50dc516a19ea — fixed in 0.0.0-20251013203444-50dc516a19ea

How to fix

Upgrade to a fixed version: SUSE Rancher 0.0.0-20251013203444-50dc516a19ea. Check the vendor advisory for mitigations.

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58269
• https://github.com/rancher/rancher/security/advisories/GHSA-mw39-9qc2-f7mg

Get alerted when CVE-2024-58269 or the next vulnerability affects your stack