Samjustus

**Name of the Vulnerable Software and Affected Versions** SUSE Rancher AI Agent versions 1.0 through 1.0.1 **Description** An information disclosure occurs when the `DEBUG` loglevel is enabled. This configuration can cause API keys or Large Language Model (LLM) response text containing sensitive data to be leaked into logfiles, which local attackers could then misuse to obtain credentials or sensitive information. **Recommendations** Update SUSE Rancher AI Agent to version 1.0.2. Disable the `DEBUG` loglevel to prevent sensitive data from being written to logs.

**Name of the Vulnerable Software and Affected Versions** Rancher FleetWorkspace versions 0.7.0 through 0.7.10 Rancher FleetWorkspace versions 0.8.0 through 0.8.7 Rancher FleetWorkspace versions 0.9.0 through 0.9.6 Rancher FleetWorkspace versions 0.10.0 through 0.10.7 **Description** A flaw in the admission path of the Rancher webhook handler allows side effects to occur. An unauthenticated attacker with network access to the in-cluster `rancher-webhook` service can submit a crafted admission payload to create workspace-related Kubernetes objects using identity data chosen by the attacker. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rancher Manager versions prior to 2.9.12 Rancher Manager versions prior to 2.10.10 Rancher Manager versions prior to 2.11.6 Rancher Manager versions prior to 2.12.2 **Description** A flaw exists in Rancher Manager that allows sensitive information, such as email addresses, to be sent in `Impersonate-Extra-*` headers to external entities when creating new cloud credentials. This occurs via the `/meta/proxy` API endpoint. The information is sent to whitelisted domains specified in `nodedrivers.management.cattle.io` objects, including domains like `amazonaws.com` and `api.digitalocean.com`. The headers involved include `Impersonate-Extra-Username` and `Impersonate-Extra-Principalid`. Passwords, password hashes, and Rancher authentication tokens are not leaked. **Recommendations** Update Rancher Manager to version 2.9.12 or later. Update Rancher Manager to version 2.10.10 or later. Update Rancher Manager to version 2.11.6 or later. Update Rancher Manager to version 2.12.2 or later.