HighVulnerabilityLLM-specific
CVE-2026-44934: SUSE Rancher AI Agent information disclosure in DEBUG loglevel logs
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-44934
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2026-44934 is an information disclosure flaw in SUSE Rancher AI Agent 1.0 before 1.0.2. When the DEBUG loglevel is set, API keys or LLM response text, which may contain sensitive data, are written to log files. A local attacker who can read those logs could misuse the exposed data or credentials. SUSE rates it CVSS 4.0 7.0 (HIGH), and NVD has not yet provided an assessment.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Topics
Related items
- MediumAI coding agents expose developer screenshots on GitHub reposSimilar attack · ReversingLabs Blog
- InfoHow to Secure AI Models in Production Environments | Endor LabsSimilar attack · Endor Labs Blog
- InfoLLM Development Risks: Security Threats and Mitigation Strategies | Endor LabsSimilar attack · Endor Labs Blog
- InfoWhen Agents Talk, Secrets Travel: Topology-Driven Leakage and Recipient-Conditioned Sanitization in Multi-Agent LLM SystemsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoStrengthening our defenses against distillation attacksSimilar attack · Anthropic Research Blog