Suse Rancher vulnerabilities

CVE-2026-75033 [HIGH] CWE-639 CVE-2026-75033: A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io/projectId` annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the annotation to a project ID from another cluster and have that

CVE-2026-44946 [HIGH] CWE-294 CVE-2026-44946: A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler di A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,

CVE-2026-25705 [HIGH] CWE-35 CVE-2026-25705: A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.co A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be injected in Rancher through a path traversal in the `compressedEndpoint` field inside a `UIPlugin` deployment. A malicious UI extension could abuse that to: * Overwrite Rancher bin

CVE-2021-36778 [HIGH] CWE-863 CVE-2021-36778: A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party reposit A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers. This issue affects: SUSE Rancher Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.

CVE-2026-44949 [HIGH] CWE-306 CVE-2026-44949: A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handle A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to the in-cluster rancher-webhook service could submit a crafted admission payload and cause workspace-related

CVE-2023-22647 [HIGH] CWE-267 CVE-2023-22647: An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage th An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the secret being deleted, but their read-level permissions to the secret being preserved. When this operation was followed-up by other specially crafted command

CVE-2024-22030 [HIGH] CWE-295 CVE-2024-22030: A vulnerability has been identified within Rancher that can be exploited in narrow circumstances th A vulnerability has been identified within Rancher that can be exploited in narrow circumstances through a man-in-the-middle (MITM) attack. An attacker would need to have control of an expired domain or execute a DNS spoofing/hijacking attack against the domain to exploit this vulnerability. The targeted domain is the one used as the Rancher URL.

CVE-2024-52280 [HIGH] CWE-200 CVE-2024-52280: A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which al A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to watch resources they are not allowed to access, when they have at least some generic permissions on the type. This issue affects rancher: before 2175e09, before 6e30359, before c744f0b.

CVE-2024-52281 [HIGH] CWE-79 CVE-2024-52281: A: Improper Neutralization of Input During Web Page Generation vulnerability in SUSE rancher allows A: Improper Neutralization of Input During Web Page Generation vulnerability in SUSE rancher allows a malicious actor to perform a Stored XSS attack through the cluster description field. This issue affects rancher: from 2.9.0 before 2.9.4.

CVE-2023-32194 [HIGH] CWE-269 CVE-2023-32194: A vulnerability has been identified when granting a create or * global role for a resource type of " A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matter the API group, the subject will receive * permissions for core namespaces. This can lead to someone being capable of accessing, creating, updating, or deleting a namespace in the project.

CVE-2024-52284 [HIGH] CWE-312 CVE-2024-52284: Unauthorized disclosure of sensitive data: Any user with `GET` or `LIST` permissions on `BundleDeplo Unauthorized disclosure of sensitive data: Any user with `GET` or `LIST` permissions on `BundleDeployment` resources could retrieve Helm values containing credentials or other secrets.

CVE-2024-58260 [HIGH] CWE-863 CVE-2024-58260: A vulnerability has been identified within Rancher Manager where a missing server-side validation on A vulnerability has been identified within Rancher Manager where a missing server-side validation on the `.username` field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts.

CVE-2022-43756 [HIGH] CWE-74 CVE-2022-43756: A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in SUSE Rancher allows remote attackers to cause denial of service by supplying specially crafted git credentials. This issue affects: SUSE Rancher wrangler version 0.7.3 and prior versions; wrangler version 0.8.4 and prior versions; wrang

CVE-2021-36784 [HIGH] CWE-269 CVE-2021-36784: A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4.

CVE-2019-6287 [HIGH] CWE-269 CVE-2019-6287: In Rancher 2.0.0 through 2.1.5, project members have continued access to create, update, read, and d In Rancher 2.0.0 through 2.1.5, project members have continued access to create, update, read, and delete namespaces in a project after they have been removed from it.

CVE-2022-43758 [MEDIUM] CWE-78 CVE-2022-43758: A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SUSE Rancher allows code execution for user with the ability to add an untrusted Helm catalog or modifying the URL configuration used to download KDM (only admin users by default) This issue affects: SUSE Rancher Rancher versions prior to 2.5

CVE-2026-44947 [MEDIUM] CWE-281 CVE-2026-44947: A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher version A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those permissions from a RoleTemplate.

CVE-2022-21951 [MEDIUM] CWE-319 CVE-2022-21951: A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows atta A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This issue affects: SUSE Rancher Rancher versions prior to

CVE-2023-32197 [MEDIUM] CWE-269 CVE-2023-32197: A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=t A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affects rancher: from 2.7.0 before 2.7.14, from 2.8.0 before 2.8.5.

CVE-2024-22032 [MEDIUM] CWE-200 CVE-2024-22032: A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secr A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled. When reconciling, the Kube API secret values are written in plaintext on the AppliedSpec. Cluster owners, Cluster members, and Project members (for projects within the cluster), all have RBAC permissions to view