SUSE CVE-2026-88810

A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...

CVE-2026-88810

A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...

CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,...

CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,...

CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,...

CVE-2026-88811

A missing filtering vulnerability in the SUSE Rancher Manager meta proxy allows rancher credentials to be leaked to cloud providers. This issue affects SUSE Rancher versions 2.15.0 to 2.15.3 , 2.14.0 to 2.14.7 , and 2.13.0 to 2.13.11 . The vulnerability is characterized by the insertion of sensit...

EUVD-2026-115328

A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...

CVE-2026-88810

A privilege escalation vulnerability exists in the Rancher Manager role-based access control system. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces across all managed downstream clusters but lacks the privilege-escalation validation applied to othe...

CVE-2026-88810 Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules

A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...

CVE-2026-88810 Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules

A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...

CVE-2026-88810 Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules

A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...

CVE-2026-88810: SUSE Rancher: A privilege escalation issue was discovered in Rancher Manager's role-based access control

A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...

PT-2026-135535

A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalati...

SUSE CVE-2026-104623

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

SUSE Rancher Manager 2.15.2 Local Cluster Shell Authorization Bypass

SUSE Rancher Manager versions 2.11.0 through 2.11.18, 2.12.0 through 2.12.14, 2.13.0 through 2.13.10, 2.14.0 through 2.14.6, and 2.15.0 through 2.15.2 contain an authorization bypass that allows an authenticated user without local-cluster access to obtain a shell pod on the management cluster. A...

Exploit for CVE-2026-104623

CVE-2026-104623 — Rancher Manager local-cluster-shell authoriz...

CVE-2026-104623

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

CVE-2026-104623 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

CVE-2026-104623 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

CVE-2026-104623

An authorization bypass exists in the local cluster shell feature of SUSE Rancher Manager versions 2.15.0–2.15.3, 2.14.0–2.14.7, 2.13.0–2.13.11, 2.12.0–2.12.15, 2.11.0–2.11.19, and possibly older versions. The root cause is that an authorization check was not applied to every API route reaching t...