{"data":{"id":"9e2a01c6-8852-4e64-8228-9778c9b13ce3","title":"CVE-2026-44934: A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM","summary":"When DEBUG loglevel (a setting that outputs detailed program information for troubleshooting) is enabled in SUSE Rancher AI Agent versions before 1.0.2, sensitive data like API keys (credentials for accessing external services) and LLM response text can be written to logfiles where local attackers (people with access to the same computer) could find and misuse them. This is rated as HIGH severity with a CVSS score (a 0-10 rating of how severe a vulnerability is) of 7.0.","solution":"Update SUSE Rancher AI Agent to version 1.0.2 or later.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-44934","publishedAt":"2026-07-06T09:16:36.170Z","cveId":"CVE-2026-44934","cweIds":["CWE-215"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["pii_leakage"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["SUSE Rancher AI Agent"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-07-06T09:16:36.170Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}