CVE-2025-67860 PUBLISHED

NeuVector scanner insecurely handles passwords as command arguments

Assigner: suse
Reserved: 12.12.2025 Published: 25.02.2026 Updated: 25.02.2026

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS Score: 3.8

Product Status

Vendor SUSE
Product harvester
Versions Default: unaffected
  • affected from 4.0 to 4.072 (excl.)

References

Problem Types

  • CWE-522: Insufficiently Protected Credentials CWE