Rancher sends sensitive information to external services through the `/meta/proxy` endpoint

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-54468 · Microsoft / collected KEV context

EUVD-2025-31337

GHSA-mjcp-rj3c-36fr

GO-2025-3982

cve-program · CVE-2025-54468

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-54468
• https://github.com/rancher/rancher/security/advisories/GHSA-mjcp-rj3c-36fr

euvd · EUVD-2025-31337

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-54468
• https://github.com/rancher/rancher/security/advisories/GHSA-mjcp-rj3c-36fr

nvd · CVE-2025-54468

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-54468
• https://github.com/rancher/rancher/security/advisories/GHSA-mjcp-rj3c-36fr

osv · GHSA-mjcp-rj3c-36fr

• https://github.com/rancher/rancher/security/advisories/GHSA-mjcp-rj3c-36fr
• https://nvd.nist.gov/vuln/detail/CVE-2025-54468
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-54468
• https://github.com/rancher/rancher
• https://pkg.go.dev/vuln/GO-2025-3982

osv · GO-2025-3982

• https://github.com/rancher/rancher/security/advisories/GHSA-mjcp-rj3c-36fr
• https://nvd.nist.gov/vuln/detail/CVE-2025-54468
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-54468

No related operational record is retained in the current change model.