CVE-2025-46808— Sensitive information is leaked into NeuVector’s manager container logs
Quick assessment
Affected
SUSE neuvector
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SUSE neuvector manager 存在“日志文件中插入敏感信息”漏洞，导致敏感信息泄露至 manager 容器的日志中。 该问题影响版本：neuvector 5.4.5 之前。
Possible ATT&CK Techniques 2 AI
T1120 · Peripheral Device Discovery T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-46808
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sensitive information is leaked into NeuVector’s manager container logs
Source: CVE Program / CVE List V5
Vulnerability Description
An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log
This issue affects neuvector: before 5.4.5.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过日志文件的信息暴露
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2025-46808
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-46808
请登录查看更多情报信息。
Other References for CVE-2025-46808 (1)
IV. Related Vulnerabilities
Same product: neuvector
-
CVE-2026-25703
Potential information leakage from manager /network/graph AP -
CVE-2025-66001
NeuVector OpenID Connect is vulnerable to man-in-the-middle -
CVE-2025-54471
NeuVector is shipping cryptographic material into its binary -
CVE-2025-54469
NeuVector Enforcer is vulnerable to Command Injection and Bu -
CVE-2025-54470
NeuVector telemetry sender is vulnerable to MITM and DoS
Same vendor: SUSE
-
CVE-2026-75036
Fleet: DNS exfiltration via Sprig getHostByName in fleet.yam -
CVE-2026-75035
Rancher: ext.cattle.io/v1 Token store: cross-user token disc -
CVE-2026-75034
Rancher: SAML Assertion Replay -
CVE-2026-75033
Rancher: Cross-Cluster Secret Leakage via Namespace projectI -
CVE-2026-71404
Rancher: Ownership-less ClusterRole overwrite via attacker-c
Same weakness: CWE-532
-
CVE-2026-80124
Dell SCG 5.0 日志敏感信息泄露 -
CVE-2026-78631
Improper Restriction of Sensitive Information in Okta Hyperd -
CVE-2026-78627
Improper Credential Protection in Okta Hyperdrive Integratio -
CVE-2026-68873
Windows Program Compatibility Assistant Service Information -
CVE-2026-86597
Sensitive information written to logs by Snowflake drivers
V. Comments for CVE-2025-46808
No comments yet