Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Rancher — Vulnerabilities & Security Advisories 90

All 90 CVE vulnerabilities found in Rancher, with AI-generated Chinese analysis, references, and POCs.

This page documents known software weaknesses affecting Rancher, the popular open-source container management platform developed by SUSE. It aggregates vulnerability records associated with the product, encompassing both direct application flaws and issues within its integrated components or dependencies. The collection spans historical entries from the early adoption of the platform through recent updates, ensuring a comprehensive view of the security landscape surrounding Rancher over time. By accessing this resource, users can systematically track vendor advisories issued by SUSE and other relevant security entities regarding Rancher-specific issues. This facilitates a deeper understanding of specific weakness classes that impact container orchestration and management tools. Furthermore, researchers and administrators can look up the product’s vulnerability history to assess the evolution of security patches and identify recurring patterns in reported defects. The data provided here supports informed risk management decisions by highlighting how different versions of Rancher have been affected by various categories of vulnerabilities. It serves as a neutral reference for evaluating the current security posture of Rancher deployments without emphasizing any specific product features or commercial benefits. Users interested in compliance, auditing, or general security awareness will find structured information that clarifies the nature and frequency of reported issues. This approach ensures that the content remains strictly informational, focusing on factual vulnerability data rather than promotional material or subjective analysis of the software’s market position.

Vendor: SUSE

CVE ID Title CVSS Severity Published
CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy CWE-201 9.1 Critical 2026-11-02
CVE-2026-88810 Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules CWE-306 7.2 High 2026-11-02
CVE-2026-88809 Rancher meta proxy allowlist bypass leading to server-side request forgery CWE-918 7.6 High 2026-11-02
CVE-2026-94290 Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller CWE-250 9.1 Critical 2026-11-02
CVE-2026-104623 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster CWE-290 6.3 Medium 2026-10-30
CVE-2026-104615 Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace CWE-290 7.9 High 2026-10-30
CVE-2024-22031 Rancher users who can create Projects can gain access to arbitrary projects CWE-863 8.5 High 2026-10-15
CVE-2026-88804 Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher CWE-79 9.6 Critical 2026-09-28
CVE-2026-88805 Session Not Revoked Server-Side on Logout in Rancher CWE-613 8.1 High 2026-09-28
CVE-2026-88808 Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters CWE-250 8.8 High 2026-09-28
CVE-2026-93540 Fleet applies namespace labels and annotations without the bundle's service account privileges CWE-266 6.5 Medium 2026-09-28
CVE-2026-93539 Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver CWE-306 5.4 Medium 2026-09-28
CVE-2026-93538 Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet CWE-290 7.1 High 2026-09-28
CVE-2026-93537 Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory CWE-23 6.5 Medium 2026-09-28
CVE-2026-75035 Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass CWE-639 7.7 High 2026-09-03
CVE-2026-75034 Rancher: SAML Assertion Replay CWE-294 7.4 High 2026-09-03
CVE-2026-75033 Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing CWE-639 7.7 High 2026-09-03
CVE-2026-71404 Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole CWE-639 8.7 High 2026-09-03
CVE-2026-71403 Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind CWE-639 6.1 Medium 2026-09-03
CVE-2026-44945 Cross-Cluster Impersonation Confused-Deputy Privilege Escalation CWE-441 9.1 Critical 2026-08-05
CVE-2026-55997 Long-lived Rancher registration token exposed in plaintext CWE-312 8.8 High 2026-08-05
CVE-2026-55998 Cluster Existence Oracle via Unauthenticated Import Endpoint CWE-204 5.3 Medium 2026-08-05
CVE-2026-59675 Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service CWE-770 7.5 High 2026-08-05
CVE-2026-55996 Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent 4.3 Medium 2026-08-05
CVE-2026-44938 Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent CWE-522 8.8 High 2026-07-07
CVE-2026-44937 SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components CWE-918 - - 2026-07-06
CVE-2026-44936 Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml CWE-918 5.0 Medium 2026-07-06
CVE-2026-44934 Exposed tokens in SUSE Rancher AI Agent logs CWE-215 - - 2026-07-06
CVE-2026-44935 Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer CWE-1287 9.9 Critical 2026-07-02
CVE-2026-44948 Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler CWE-23 - - 2026-06-30

All 90 known CVE vulnerabilities affecting Rancher with full Chinese analysis, references, and POCs where available.