CVE-2025-62877
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-1188
Description
Projects using the SUSE Virtualization (Harvester) environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utilized along with the Harvester configuration setup.
Affected packages
| Go | github.com/harvester/harvester-installer | 1.5.0 → ∞ |
| Go | github.com/harvester/harvester-installer | 1.6.0 → ∞ |
References
Status: profiled · ingested 2026-10-07T12:00:43.000Z