CVE-2025-62879: Rancher Backup Operator pod's logs leak S3 tokens

(updated )

A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod’s logs.

Specifically, the S3 accessKey and secretKey are exposed in the pod’s logs under the following logging level conditions:

Variable ExposedLogging Level Condition
accessKeytrace: false (default), and debug: false (default)
secretKeytrace: true or debug: true

Note: The S3 accessKey is exposed in the logs without requiring any supplementary configuration.

For further information on this attack category, please consult the associated MITRE ATT&CK - Technique - Log Enumeration.

References

Code Behaviors & Features

Detect and mitigate CVE-2025-62879 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →