Skip to content
Suse Rancher vulnerabilities
-
kubernetes ingress-nginx, suse rancher prime rke2 ingress-nginx +1 more
ingress-nginx mirror-target self-DOS
CVE-2026-116472
2.7 Low
-
suse rancher
Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
CVE-2026-88811
9.1 Critical
-
suse rancher
Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules
CVE-2026-88810
7.2 High
-
suse rancher
Rancher meta proxy allowlist bypass leading to server-side request forgery
CVE-2026-88809
7.6 High
-
suse rancher
Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller
CVE-2026-94290
9.1 Critical
-
suse rancher
Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster
CVE-2026-104623
Public exploit
6.3 Medium
-
suse rancher
Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace
CVE-2026-104615
7.9 High
-
suse rancher
Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher
CVE-2026-88804
Public exploit
9.6 Critical
-
suse rancher
Session Not Revoked Server-Side on Logout in Rancher
CVE-2026-88805
8.1 High
-
suse rancher, rancher fleet +1 more
Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters
CVE-2026-88808
8.8 High
-
suse rancher, rancher fleet +1 more
Fleet applies namespace labels and annotations without the bundle's service account privileges
CVE-2026-93540
6.5 Medium
-
suse rancher, rancher fleet +1 more
Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver
CVE-2026-93539
5.4 Medium
-
suse rancher, rancher fleet +1 more
Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet
CVE-2026-93538
7.1 High
-
suse rancher, rancher fleet +1 more
Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory
CVE-2026-93537
6.5 Medium
-
fleetdm fleet, suse rancher fleet +1 more
Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing
CVE-2026-75036
5.3 Medium
-
suse rancher
Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass
CVE-2026-75035
7.1 High
-
suse rancher
Rancher: SAML Assertion Replay
CVE-2026-75034
7.4 High
-
suse rancher
Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing
CVE-2026-75033
7.7 High
-
suse rancher
Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole
CVE-2026-71404
8.7 High
-
suse rancher
Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind
CVE-2026-71403
6.1 Medium
-
suse rancher
Cross-Cluster Impersonation Confused-Deputy Privilege Escalation
CVE-2026-44945
9.1 Critical
-
rancher
Long-lived Rancher registration token exposed in plaintext
CVE-2026-55997
8.8 High
-
suse rancher
Cluster Existence Oracle via Unauthenticated Import Endpoint
CVE-2026-55998
5.3 Medium
-
suse rancher
Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service
CVE-2026-59675
7.5 High
-
suse rancher
Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent
CVE-2026-55996
4.3 Medium
-
suse rancher
Exposed tokens in SUSE Rancher AI Agent logs
CVE-2026-44934
7.0 High
-
suse rancher, rancher fleet +1 more
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
CVE-2026-44935
Fix available
9.9 Critical
-
suse rancher, rancher fleet +1 more
Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
CVE-2026-44936
Fix available
5.0 Medium
-
suse rancher, rancher fleet +1 more
SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
CVE-2026-44937
Fix available
8.3 High
-
suse rancher, rancher fleet +1 more
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
CVE-2026-44938
Fix available
8.8 High
-
suse rancher, rancher fleet +1 more
Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler
CVE-2026-44948
5.3 Medium
-
suse rancher
Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook
CVE-2026-44949
7.0 High
-
suse rancher
Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher
CVE-2026-44947
6.9 Medium
-
suse rancher
SAML Authentication Replay in Rancher
CVE-2026-44946
9.5 Critical
-
suse rancher
Over-inclusive team membership expansion in GitHub App authentication provider for Rancher
CVE-2026-41053
Fix available
8.8 High
-
suse rancher
Rancher Privilege Escalation from Project Owner to Host
CVE-2026-41052
Fix available
9.4 Critical
-
suse rancher
Command injection through unsanitized YAML parameter in Rancher
CVE-2026-44939
Fix available
9.4 Critical
-
suse container suse/sle-micro-rancher/5.3:latest, container suse/sle-micro-rancher/5.4:latest, container suse/sle-micro/5.5:latest +31 more +33 more
Missing exit out of permission check in haveged could lead to root exploit
CVE-2026-41054
Fix available
7.8 High
-
suse rancher, rancher fleet +1 more
Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
CVE-2026-41050
Fix available
9.9 Critical
-
suse rancher
Rancher Extensions have arbitrary file access via path traversal
CVE-2026-25705
Fix available
8.4 High
-
suse rancher, rancher backup and restore operator +1 more
Rancher Backup Operator pod's logs leak S3 tokens
CVE-2025-62879
Fix available
6.8 Medium
-
suse rancher
Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
CVE-2025-62878
Public exploitFix available
9.9 Critical
-
suse rancher
Rancher CLI skips TLS verification on Rancher CLI login command
CVE-2025-67601
Fix available
8.3 High
-
suse rancher
Rancher exposes sensitive information through audit logs
CVE-2024-58269
Fix available
4.3 Medium
-
suse rancher
Rancher user retains access to clusters despite Global Role removal
CVE-2023-32199
Fix available
4.3 Medium
-
suse rancher
Rancher update on users can deny the service to the admin
CVE-2024-58260
Fix available
7.6 High
-
suse rancher
Rancher CLI SAML authentication is vulnerable to phishing attacks
CVE-2024-58267
Fix available
8.0 High
-
suse rancher
Rancher sends sensitive information to external services through the `/meta/proxy` endpoint
CVE-2025-54468
Fix available
4.7 Medium
-
suse rancher
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text
CVE-2024-52284
Fix available
7.7 High
-
suse rancher
Rancher affected by unauthenticated Denial of Service
CVE-2024-58259
Fix available
8.2 High
- Show olderLoading…