SUSE Observability rancher-extension-stackstate Exposes Service Tokens
CVE-2026-44940 Published on September 17, 2026
Service token exposure and potential privilege escalation in SUSE Observability
The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them securely. An attacker with minimal access could obtain the token to gain unauthorized access or escalate privileges within the observability environment.
Vulnerability Analysis
CVE-2026-44940 is exploitable with network access, requires user interaction and a small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Types
Cleartext Storage of Sensitive Information
The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere. Because the information is stored in cleartext, attackers could potentially read it. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.
What is an Information Disclosure Vulnerability?
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVE-2026-44940 has been classified to as an Information Disclosure vulnerability or weakness.
Affected Versions
SUSE Observability:- Before 2.13.6 is affected.
- Version 2.14.0 and below 2.14.2 is affected.