CVE-2025-46808

    Dashboard / Vulnerabilities / CVE-2025-46808

    CVE-2025-46808

    Published: 9 Sept 2026Last Modified: 12 Sept 2026

    Summary: Sensitive information is leaked into NeuVector’s manager container logs

    Details: An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46808.json, https://github.com/neuvector/manager/security/advisories/GHSA-fggw-hv56-8m6r, https://nvd.nist.gov/vuln/detail/CVE-2025-46808, https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46808

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -c135c3ffa3a09ada6b2ab70558f4c479226ff9f3

    Affected versions

    v5.4.5-rc2
    v5.4.5-rc1
    v5.4.4-rc2
    v5.4.4-rc1
    v5.4.3-rc2
    v5.4.3-rc1
    v5.4.1
    v5.4.1-alpha
    v5.4.0-b3
    v5.4.0-b2-alpine
    v5.4.0-b2
    v5.4.0-b1-bci
    v5.4.0-b1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2025-46808 | CVE-DB