Exploit for CVE-2026-104623

CVE-2026-104623 — Rancher Manager local-cluster-shell authoriz...

CVE-2026-104623 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

CVE-2026-104623 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

CVE-2026-104623

An authorization bypass exists in the local cluster shell feature of SUSE Rancher Manager versions 2.15.0–2.15.3, 2.14.0–2.14.7, 2.13.0–2.13.11, 2.12.0–2.12.15, 2.11.0–2.11.19, and possibly older versions. The root cause is that an authorization check was not applied to every API route reaching t...

EUVD-2026-114186

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

CVE-2026-104623: SUSE Rancher: A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE…

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...