SUSE Rancher
86 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-88811 | 2.15.0 – < 2.15.3 ; 2.14.0 – < 2.14.7 ; 2.13.0 – < 2.13.11 ; … | Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy | CRITICAL 9.1 | |||
| CVE-2026-88810 | 2.15.2 – < 2.15.3 | Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules | HIGH 7.2 | |||
| CVE-2026-88809 | 2.15.0 – < 2.15.3 ; 2.14.0 – < 2.14.7 ; 2.13.0 – < 2.13.11 ; … | Rancher meta proxy allowlist bypass leading to server-side request forgery | HIGH 7.6 | |||
| CVE-2026-94290 | 0.16.0 – < 0.16.3 ; 0.15.0 – < 0.15.8 ; 0.14.0 – < 0.14.12 ; … | Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller | CRITICAL 9.1 | |||
| CVE-2026-104623 | 2.15.0 – < 2.15.3 ; 2.14.0 – < 2.14.7 ; 2.13.0 – < 2.13.11 ; … | Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster | MEDIUM 6.3 | 0.3 % | ||
| CVE-2026-104615 | 0.16.0 – < 0.16.3 ; 0.15.0. – < 0.15.17 ; 0.14.0 – < 0.14.12 ; … | Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace | HIGH 7.9 | 0.2 % | ||
| CVE-2024-22031 | 2.8.0 – < 2.9.9 ; 2.10.0 – < 2.10.5 ; 2.11.0 – < 2.11.1 | Rancher users who can create Projects can gain access to arbitrary projects | HIGH 8.5 | 0.4 % | ||
| CVE-2026-88804 | 2.15.0 – < 2.15.2 ; 2.14.0 – < 2.14.6 ; 2.13.0 – < 2.13.10 ; … | Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher | CRITICAL 9.6 | 0.4 % | ||
| CVE-2026-88805 | 2.15.0 – < 2.15.2 | Session Not Revoked Server-Side on Logout in Rancher | HIGH 8.1 | 0.3 % | ||
| CVE-2026-88808 | 0.16.0 – < 0.16.2 ; 0.15.0 – < 0.15.7 ; 0.14.0 – < 0.14.11 | Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters | HIGH 8.8 | 0.3 % | ||
| CVE-2026-93540 | 0.16.0 – < 0.16.1 ; 0.15.0 – < 0.15.7 ; 0.14.0 – < 0.14.11 ; … | Fleet applies namespace labels and annotations without the bundle's service account privileges | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-93539 | 0.16.0 – < 0.16.2 | Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-93538 | 0.16.0 – < 0.16.1 ; 0.15.0 – < 0.15.6 ; 0.14.0 – < 0.14.10 ; … | Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet | HIGH 7.1 | 0.2 % | ||
| CVE-2026-93537 | 0.16.0 – < 0.16.2 ; 0.15.0 – < 0.15.7 ; 0.14.0 – < 0.14.11 ; … | Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-75035 | < 2.15.1 | Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass | HIGH 7.1 | 0.3 % | ||
| CVE-2026-75034 | < 2.15.1 | Rancher: SAML Assertion Replay | HIGH 7.4 | 0.3 % | ||
| CVE-2026-75033 | < 2.15.1 | Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing | HIGH 7.7 | 0.3 % | ||
| CVE-2026-71404 | < 2.15.1 | Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole | HIGH 8.7 | 0.4 % | ||
| CVE-2026-71403 | < 2.15.1 | Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind | MEDIUM 6.1 | 0.4 % | ||
| CVE-2026-44945 | 2.11.0 – < 2.11.16 ; 2.12.0 – < 2.12.12 ; 2.13.0 – < 2.13.8 ; … | Cross-Cluster Impersonation Confused-Deputy Privilege Escalation | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-55998 | 2.14.0 – < 2.14.4 ; 2.13.0 – < 2.13.8 ; 2.12.0 – < 2.12.12 ; … | Cluster Existence Oracle via Unauthenticated Import Endpoint | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-59675 | 2.14.0 – < 2.14.4 ; 2.13.0 – < 2.13.8 ; 2.12.0 – < 2.12.12 | Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service | HIGH 7.5 | 0.6 % | ||
| CVE-2026-55996 | 2.11.0 – < 2.11.16 ; 2.12.0 – < 2.12.12 ; 2.13.0 – < 2.13.8 ; … | Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-44938 | 0.15.0 – < 0.15.2 ; 0.14.0 – < 0.14.6 ; 0.13.0 – < 0.13.11 ; … | Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent | HIGH 8.8 | 0.4 % | ||
| CVE-2026-44937 | 0.15.0 – < 0.15.2 ; 0.14.0 – < 0.14.6 ; 0.13.0 – < 0.13.11 ; … | SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components | HIGH 8.3 | 0.4 % | ||
| CVE-2026-44936 | 0.15.0 – < 0.15.2 ; 0.14.0 – < 0.14.6 ; 0.13.0 – < 0.13.11 ; … | Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml | MEDIUM 5.0 | 0.3 % | ||
| CVE-2026-44934 | 1.0.0 – < 1.0.2 | Exposed tokens in SUSE Rancher AI Agent logs | HIGH 7.0 | 0.2 % | ||
| CVE-2026-44935 | 0.15.0 – < 0.15.2 ; 0.14.0 – < 0.14.6 ; 0.13.0 – < 0.13.11 ; … | Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-44948 | 0.12.0 – < 0.12.16 ; 0.13.0 – < 0.13.12 ; 0.14.0 – < 0.14.7 ; … | Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-44949 | 0.7.0 – < 0.7.10 ; 0.8.0 – < 0.8.7 ; 0.9.0 – < 0.9.6 ; … | Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook | HIGH 7.0 | 0.4 % | ||
| CVE-2026-44947 | 2.13.0 – < 2.13.7 ; 2.14.0 – < 2.14.3 | Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-44946 | 2.14.0 – < 2.14.3 ; 2.13.0 – < 2.13.7 ; 2.12.0 – < 2.12.11 ; … | SAML Authentication Replay in Rancher | CRITICAL 9.5 | 0.4 % | ||
| CVE-2026-41053 | 2.14.0 – < 2.14.2 ; 2.13.0 – < 2.13.6 | Over-inclusive team membership expansion in GitHub App authentication provider for Rancher | HIGH 8.8 | 0.5 % | ||
| CVE-2026-41052 | 2.12.0 – < 2.12.10 ; 2.13.0 – < 2.13.6 ; 2.14.0 – < 2.14.2 | Rancher Privilege Escalation from Project Owner to Host | CRITICAL 9.4 | 0.4 % | ||
| CVE-2026-44939 | 2.14.0 – < 2.14.2 ; 2.13.0 – < 2.13.6 ; 2.12.0 – < 2.12.10 ; … | Command injection through unsanitized YAML parameter in Rancher | CRITICAL 9.4 | 1.3 % | ||
| CVE-2026-41050 | 0.15.0 – < 0.15.1 ; 0.14.0 – < 0.14.5 ; 0.13.0 – < 0.13.10 ; … | Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-25705 | 2.14.0 – < 2.14.1 ; 2.13.0 – < 2.13.5 ; 2.12.0 – < 2.12.9 ; … | Rancher Extensions have arbitrary file access via path traversal | HIGH 8.4 | 0.4 % | ||
| CVE-2025-62879 | 9.0.0 – < 9.0.1 ; 8.0.0 – < 8.1.2 ; 7.0.0 – < 7.0.5 ; … | Rancher Backup Operator pod's logs leak S3 tokens | MEDIUM 6.8 | 0.4 % | ||
| CVE-2025-62878 | < 0.0.34 | Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern | CRITICAL 9.9 | 0.6 % | ||
| CVE-2025-67601 | < 0.0.0-20260129092249-bb0625fd1896 ; 2.13.0 – < 2.13.2 ; 2.12.0 – < 2.12.6 ; … | Rancher CLI skips TLS verification on Rancher CLI login command | HIGH 8.3 | 0.2 % | ||
| CVE-2024-58269 | < 0.0.0-20251013203444-50dc516a19ea | Rancher exposes sensitive information through audit logs | MEDIUM 4.3 | 0.3 % | ||
| CVE-2023-32199 | < 0.0.0-20251014212116-7faa74a968c2 | Rancher user retains access to clusters despite Global Role removal | MEDIUM 4.3 | 0.2 % | ||
| CVE-2024-58260 | 2.12.0 – < 2.12.2 ; 2.11.0 – < 2.11.6 ; 2.10.0 – < 2.10.10 ; … | Rancher update on users can deny the service to the admin | HIGH 7.6 | 0.5 % | ||
| CVE-2024-58267 | 2.12.0 – < 2.12.2 ; 2.11.0 – < 2.11.6 ; 2.10.0 – < 2.10.10 ; … | Rancher CLI SAML authentication is vulnerable to phishing attacks | HIGH 8.0 | 0.2 % | ||
| CVE-2025-54468 | 2.12.0 – < 2.12.2 ; 2.11.0 – < 2.11.6 ; 2.10.0 – < 2.10.10 ; … | Rancher sends sensitive information to external services through the `/meta/proxy` endpoint | MEDIUM 4.7 | 0.4 % | ||
| CVE-2024-58259 | 2.12.0 – < 2.12.1 ; 2.11.0 – < 2.11.5 ; 2.10.0 – < 2.10.9 ; … | Rancher affected by unauthenticated Denial of Service | HIGH 8.2 | 0.5 % | ||
| CVE-2024-52284 | 0.13.0 – < 0.13.1-0.20250806151509-088bcbea7edb ; 0.12.0 – < 0.12.6 ; 0.11.0 – < 0.11.10 | Rancher Fleet Helm Values are stored inside BundleDeployment in plain text | HIGH 7.7 | 0.2 % | ||
| CVE-2023-32197 | 2.7.0 – < 2.7.14 ; 2.8.0 – < 2.8.5 | Rancher's External RoleTemplates can lead to privilege escalation | HIGH 7.5 | 0.6 % | ||
| CVE-2024-22036 | 2.7.0 – < 2.7.16 ; 2.8.0 – < 2.8.9 ; 2.9.0 – < 2.9.3 | Rancher Remote Code Execution via Cluster/Node Drivers | CRITICAL 9.1 | 0.8 % | ||
| CVE-2024-52281 | 2.9.0 – < 2.9.4 | Stored Cross-site Scripting vulnerability in Rancher UI | HIGH 8.9 | 0.6 % | ||
| CVE-2024-52280 | < 2175e09 ; < 6e30359 ; < c744f0b | Users can issue watch commands for arbitrary resources | HIGH 7.7 | 0.5 % | ||
| CVE-2024-52282 | 2.8.0 – < 2.8.10 ; 2.9.0 – < 2.9.4 | Rancher Helm Applications may have sensitive values leaked | MEDIUM 6.2 | 0.5 % | ||
| CVE-2025-23387 | 2.8.0 – < 2.8.13 ; 2.9.0 – < 2.9.7 ; 2.10.0 – < 2.10.3 | Rancher's SAML-based login via CLI can be denied by unauthenticated users | MEDIUM 5.3 | 0.6 % | ||
| CVE-2025-23388 | 2.8.0 – < 2.8.13 ; 2.9.0 – < 2.9.7 ; 2.10.0 – < 2.10.3 | Unauthenticated stack overflow in /v3-public/authproviders API | HIGH 8.2 | 0.6 % | ||
| CVE-2025-23389 | 2.8.0 – < 2.8.13 ; 2.9.0 – < 2.9.7 ; 2.10.0 – < 2.10.3 | Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login | HIGH 8.4 | 0.5 % | ||
| CVE-2025-23391 | 2.8.0 – < 2.8.14 ; 2.9.0 – < 2.9.8 ; 2.10.0 – < 2.10.4 | Rancher: Restricted Administrator can change Administrator's passwords | CRITICAL 9.1 | 0.5 % | ||
| CVE-2022-45157 | 2.9.0 – < 2.9.3 ; 2.7.0 – < 2.8.9 | Exposure of vSphere's CPI and CSI credentials in Rancher | HIGH 8.5 | 0.4 % | ||
| CVE-2024-22032 | 2.7.0 – < 2.7.14 ; 2.8.0 – < 2.8.5 | Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec | HIGH 7.1 | 0.4 % | ||
| CVE-2024-22030 | 2.7.0 – < 2.7.15 ; 2.8.0 – < 2.8.8 ; 2.9.0 – < 2.9.2 | Rancher agents can be hijacked by taking over the Rancher Server URL | HIGH 8.0 | 0.4 % | ||
| CVE-2023-32196 | 2.7.0 – < 2.7.14 ; 2.8.0 – < 2.8.5 | Rancher's External RoleTemplates can lead to privilege escalation | HIGH 7.5 | 0.6 % | ||
| CVE-2023-32194 | 2.6.0 – < 2.6.14 ; 2.7.0 – < 2.7.10 ; 2.8.0 – < 2.8.2 | Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core' | HIGH 8.6 | 0.4 % | ||
| CVE-2023-22650 | 2.7.0 – < 2.7.14 ; 2.8.0 – < 2.8.5 | Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider | HIGH 8.7 | 0.6 % | ||
| CVE-2023-22649 | 2.6.0 – < 2.6.14 ; 2.7.0 – < 2.7.10 ; 2.8.0 – < 2.8.2 | Rancher 'Audit Log' leaks sensitive information | HIGH 8.4 | 2.0 % | ||
| CVE-2022-43760 | >= 2.6.0 – < < 2.6.13 ; >= 2.7.0 – < < 2.7.4 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some h | HIGH 8.4 | 0.7 % | ||
| CVE-2023-22647 | >= 2.6.0 – < < 2.6.13 ; >= 2.7.0 – < < 2.7.4 | An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate K | CRITICAL 9.9 | 0.7 % | ||
| CVE-2023-22648 | >= 2.6.7 – < < 2.6.13 ; >= 2.7.0 – < < 2.7.4 | A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they | HIGH 8.8 | 0.5 % | ||
| CVE-2023-22651 | 2.6.0 – 2.7.2 | Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admissio | CRITICAL 9.9 | 0.8 % | ||
| CVE-2022-43759 | Rancher – < 2.5.17 | Rancher: Privilege escalation via promoted roles | HIGH 8.8 | 0.7 % | ||
| CVE-2022-43758 | Rancher – < 2.5.17 | Rancher: Command injection in Git package | HIGH 7.6 | 1.0 % | ||
| CVE-2022-43757 | Rancher – < 2.5.17 | Rancher: Exposure of sensitive fields | CRITICAL 9.9 | 0.6 % | ||
| CVE-2022-43756 | wrangler – 0.7.3 | Rancher/Wrangler: Denial of service when processing Git credentials | HIGH 7.5 | 0.7 % | ||
| CVE-2022-43755 | Rancher – < 2.6.10 | Rancher: Non-random authentication token | CRITICAL 9.8 | 1.7 % | ||
| CVE-2022-31249 | wrangler – 0.7.3 | [RANCHER] OS command injection in Rancher and Fleet | CRITICAL 9.8 | 3.8 % | ||
| CVE-2022-21953 | Rancher – < 2.5.17 | Authenticated user can gain unauthorized shell pod and kubectl access in the local cluster | HIGH 8.8 | 0.5 % | ||
| CVE-2022-31247 | Rancher – < 2.6.7 | Rancher: Downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB) | CRITICAL 9.1 | 1.0 % | ||
| CVE-2021-36783 | Rancher – < 2.6.4 | Rancher: Failure to properly sanitize credentials in cluster template answers | CRITICAL 9.9 | 0.8 % | ||
| CVE-2021-36782 | Rancher – < 2.5.16 | Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object | CRITICAL 9.9 | 4.2 % | ||
| CVE-2022-21951 | Rancher – < 2.5.14 | Rancher: Weave CNI password is not set if RKE template is used with CNI value overridden | MEDIUM 6.8 | 0.4 % | ||
| CVE-2021-4200 | Rancher – < 2.5.13 | Write access to the Catalog for any user when restricted-admin role is enabled | MEDIUM 5.4 | 0.6 % | ||
| CVE-2021-36784 | Rancher – < 2.5.13 | Privilege escalation for users with create/update permissions in Global Roles | HIGH 7.2 | 0.9 % | ||
| CVE-2021-36778 | Rancher – < 2.5.12 | Exposure of repository credentials to external third-party sources | HIGH 7.5 | 0.8 % | ||
| CVE-2021-36776 | Rancher – < 2.5.10 | Steve API proxy impersonation | HIGH 8.8 | 1.1 % | ||
| CVE-2021-36775 | Rancher – < 2.4.18 | Deleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings | HIGH 8.8 | 1.0 % | ||
| CVE-2022-21947 | Desktop – < V | rancher desktop: Dashboard API is network accessible | HIGH 8.8 | 0.6 % | ||
| CVE-2021-32001 | K3s – v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1 | K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token | MEDIUM 6.5 | 0.3 % | ||
| CVE-2021-25313 | Rancher – < 2.5.6 | Rancher: XSS on /v3/cluster/ | HIGH 7.1 | 1.5 % |