SUSE Rancher

• CVE-2026-88811 Critical 9.1 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy 0.4%
• CVE-2026-88810 High 7.2 Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules 0.5%
• CVE-2026-88809 High 7.6 Rancher meta proxy allowlist bypass leading to server-side request forgery 0.3%
• CVE-2026-94290 Critical 9.1 Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller 0.5%
• CVE-2026-104623 Medium 6.3 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster 0.3%
• CVE-2026-104615 High 7.9 Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace 0.2%
• CVE-2024-22031 High 8.5 Rancher users who can create Projects can gain access to arbitrary projects 0.4%
• CVE-2026-88804 Critical 9.6 Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher 1.0%
• CVE-2026-88805 High 8.1 Session Not Revoked Server-Side on Logout in Rancher 0.2%
• CVE-2026-88808 High 8.8 Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters 0.3%
• CVE-2026-93540 Medium 6.5 Fleet applies namespace labels and annotations without the bundle's service account privileges 0.2%
• CVE-2026-93539 Medium 5.4 Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver 0.2%
• CVE-2026-93538 High 7.1 Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet 0.2%
• CVE-2026-93537 Medium 6.5 Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory 0.3%
• CVE-2026-75035 High 7.7 Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass 0.3%
• CVE-2026-75034 High 7.4 Rancher: SAML Assertion Replay 0.3%
• CVE-2026-75033 High 7.7 Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing 0.3%
• CVE-2026-71404 High 8.7 Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole 0.4%
• CVE-2026-71403 Medium 6.1 Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind 0.4%
• CVE-2026-44945 Critical 9.1 Cross-Cluster Impersonation Confused-Deputy Privilege Escalation 0.6%
• CVE-2026-55998 Medium 5.3 Cluster Existence Oracle via Unauthenticated Import Endpoint 0.3%
• CVE-2026-59675 High 7.5 Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service 0.6%
• CVE-2026-55996 Medium 4.3 Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent 0.2%
• CVE-2026-44938 High 8.8 Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent 0.4%
• CVE-2026-44937 High 8.3 SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components 0.4%
• CVE-2026-44936 Medium 5.0 Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml 0.3%
• CVE-2026-44934 High 7.0 Exposed tokens in SUSE Rancher AI Agent logs 0.2%
• CVE-2026-44935 Critical 9.9 Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer 0.5%
• CVE-2026-44948 Medium 5.3 Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler 0.5%
• CVE-2026-44949 High 7.0 Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook 0.4%
• CVE-2026-44947 Medium 6.9 Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher 0.4%
• CVE-2026-44946 Critical 9.5 SAML Authentication Replay in Rancher 0.4%
• CVE-2026-41053 High 8.8 Over-inclusive team membership expansion in GitHub App authentication provider for Rancher 0.5%
• CVE-2026-41052 Critical 9.4 Rancher Privilege Escalation from Project Owner to Host 0.4%
• CVE-2026-44939 Critical 9.4 Command injection through unsanitized YAML parameter in Rancher 1.3%
• CVE-2026-41050 Critical 9.9 Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering 0.4%
• CVE-2026-25705 High 8.4 Rancher Extensions have arbitrary file access via path traversal 0.4%
• CVE-2025-62879 Medium 6.8 Rancher Backup Operator pod's logs leak S3 tokens 0.4%
• CVE-2025-62878 Critical 9.9 Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern 0.6%
• CVE-2025-67601 High 8.3 Rancher CLI skips TLS verification on Rancher CLI login command 0.2%
• CVE-2024-58269 Medium 4.3 Rancher exposes sensitive information through audit logs 0.3%
• CVE-2023-32199 Medium 4.3 Rancher user retains access to clusters despite Global Role removal 0.2%
• CVE-2024-58260 High 7.6 Rancher update on users can deny the service to the admin 0.5%
• CVE-2024-58267 High 8.0 Rancher CLI SAML authentication is vulnerable to phishing attacks 0.2%
• CVE-2025-54468 Medium 4.7 Rancher sends sensitive information to external services through the `/meta/proxy` endpoint 0.4%
• CVE-2024-58259 High 8.2 Rancher affected by unauthenticated Denial of Service 0.5%
• CVE-2024-52284 High 7.7 Rancher Fleet Helm Values are stored inside BundleDeployment in plain text 0.2%
• CVE-2023-32197 Medium 6.6 Rancher's External RoleTemplates can lead to privilege escalation 0.6%
• CVE-2024-22036 Critical 9.1 Rancher Remote Code Execution via Cluster/Node Drivers 0.8%
• CVE-2024-52281 High 8.9 Stored Cross-site Scripting vulnerability in Rancher UI 0.6%