The vulnerability of the GitHub authentication provider for Kubernetes Rancher’s cluster management software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the GitHub authentication provider for Kubernetes Rancher software management systems is related to flaws in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

CVE-2026-41053: Incorrect Implementation of Authentication Algorithm

Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2...