Rancher vulnerabilities

Products

• Rancher 9

Newest

• rancher Long-lived Rancher registration token exposed in plaintext CVE-2026-55997 8.8 HighAugust 5, 2026
• microsoft local-path-provisioner, suse local path provisioner +1 more Local Path Provisioner: HelperPod Template Injection CVE-2026-44543 Fix available 8.7 HighMay 11, 2026
• rancher Rancher's External RoleTemplates can lead to privilege escalation CVE-2023-32196 Fix available 7.5 HighJune 17, 2024
• rancher norman Norman API Cross-site Scripting Vulnerability CVE-2023-32193 Fix available 8.3 HighFebruary 8, 2024
• rancher Rancher 'Audit Log' leaks sensitive information CVE-2023-22649 Fix available 8.4 HighFebruary 8, 2024
• rancher Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core' CVE-2023-32194 Fix available 8.6 HighFebruary 8, 2024
• rancher Steve API proxy impersonation CVE-2021-36776 Fix available 8.8 HighApril 1, 2022
• rancher Deleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings CVE-2021-36775 Fix available 8.8 HighApril 1, 2022
• rancher, rancher suse linux enterprise server 15, suse linux enterprise server 15 +2 more Rancher: Privilege escalation vulnerability via malicious Connection header CVE-2021-31999 Fix available 8.8 HighJuly 15, 2021
• rancher Rancher: Cloud credentials can be used through proxy API by users without access CVE-2021-25320 Fix available 9.9 CriticalJuly 15, 2021
• rancher rancher: API group not properly specified when creating Kubernetes RBAC resources CVE-2021-25318 Fix available 8.8 HighJuly 15, 2021