CVE-2026-25705

A vulnerability has been identified in "Rancher's Extensions" https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions where malicious code can be injected in Rancher through a path traversal in the "compressedEndpoint" field inside a "UIPlugin" deployment. A malicious U...

CVE-2026-25705: Path Traversal: '.../...//'

A vulnerability has been identified in Rancher's Extensions where malicious code can be injected in Rancher through a path traversal in the compressedEndpoint field inside a UIPlugin deployment. A malicious UI extension could abuse that to: Overwrite Rancher binaries or configuration to inject...