GHSA-4J6X-2764-M8GH vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GHSA-XFJ7-QF8W-2GCR vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

CVE-2025-71261 Harvester's SUSE Virtualization Registration Client Vulnerable to MITM and DOS

An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it to bypass TLS as a security control...

Sensitive Information Exposure

Harvester is vulnerable to Sensitive Information Exposure. The vulnerability is due to the interactive installer exposing the operating system’s default SSH login password during cluster creation or host addition, potentially allowing unauthorized access to affected systems...