CVE-2025-62879

Go/github.com/rancher/backup-restore-operator CVE-2025-62879: medium 6.8

Rancher Backup Operator pod's logs leak S3 tokens

Action: Upgrade github.com/rancher/backup-restore-operator to 6.0.3 or later.

go get github.com/rancher/backup-restore-operator@v9.0.1

go get github.com/rancher/backup-restore-operator@v8.1.2

go get github.com/rancher/backup-restore-operator@v7.0.5

go get github.com/rancher/backup-restore-operator@v6.0.3

Affected

Fixed versions

Sources

• osv: GHSA-wj3p-5h3x-c74q
• https://github.com/rancher/backup-restore-operator/security/advisories/GHSA-wj3p-5h3x-c74q
• https://nvd.nist.gov/vuln/detail/CVE-2025-62879
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62879
• https://github.com/rancher/backup-restore-operator

CVE-2025-62879 · published 2026-03-03T16:44:18Z · modified 2026-09-10T03:50:41.565359162Z · JSON

Go/github.com/rancher/backup-restore-operator CVE-2025-62879: unknown

Rancher Backup Operator pod's logs leak S3 tokens in github.com/rancher/backup-restore-operator

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-4591
• https://github.com/rancher/backup-restore-operator/security/advisories/GHSA-wj3p-5h3x-c74q
• https://nvd.nist.gov/vuln/detail/CVE-2025-62879
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62879

CVE-2025-62879 · published 2026-03-10T18:28:01Z · modified 2026-06-19T12:44:20.277194727Z · JSON