Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2026-44940

Service token exposure and potential privilege escalation in SUSE Observability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them securely. An attacker with minimal access could obtain the token to gain unauthorized access or escalate privileges within the observability environment.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE SUSE Observability

Default version status: unaffected

  • 0 to < 2.13.6affected
  • 2.14.0 to < 2.14.2affected

References