PatchTheCVErancher backup and restore operator vulnerabilities and fixes
Recent CVEs affecting rancher backup and restore operator, with upgrade or downgrade steps. 1 tracked.
Also searched as: rancherbackupandrestoreoperator.
rancher backup and restore operator has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-03-04. Highest priority: CVE-2025-62879 (score 31/100).
- CVE-2025-62879 MEDIUM 6.8 UPGRADE A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens
FAQ
How do I fix rancher backup and restore operator vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rancher backup and restore operator being exploited right now?
None of the tracked rancher backup and restore operator CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rancher backup and restore operator CVE should I patch first?
CVE-2025-62879 currently ranks highest (31/100): A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens .