CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0

CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: spark-operator, stakater-reloader-fips, mongodb-kubernetes-operator-fips, prometheus-statsd-exporter, rancher-loglevel, logstash-exporter, prometheus-node-exporter, wireguard-go, vendir-fips, dagdotdev, kubevela-fips, azuredisk-csi-fips, gobuster, cephcsi-fips,...

CLEANSTART-2026-IG79399 Security fixes in kubernetes-csi-node-driver-registrar 2.13.0-r1

Package kubernetes-csi-node-driver-registrar version 2.13.0-r1 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, envoy-ratelimit, victoriametrics-cluster, flux-source-controller, datadog-agent, terraform-provider-azapi, lvm-driver, mariadb-operator, redpanda, lazygit, spire-controller-manager, cloud-provider-aws, scorecard, rook, hubble, grpcurl...

GHSA-MJCP-RJ3C-36FR Rancher sends sensitive information to external services through the `/meta/proxy` endpoint

Impact A vulnerability has been identified within Rancher Manager whereby Impersonate-Extra- headers are being sent to an external entity, for example amazonaws.com, via the /meta/proxy Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses. If...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: mattmoor-chainit, prometheus-process-exporter, hivemind, dagdotdev, secrets-store-csi-driver-provider-aws, azuredisk-csi-fips, nvidia-nsight-compute-12.9, cluster-api, docker-credential-ecr-login, mongodb-kubernetes-operator, sftpgo-plugin-geoipfilter, bank-vaults,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: stakater-reloader-fips, aws-otel-collector-fips, rancher-loglevel, logstash-exporter, kubevela-fips, splunk-otel-collector-fips, azuredisk-csi-fips, cephcsi-fips, cluster-api-azure-controller, fuse-overlayfs-snapshotter, sigstore-scaffolding, trillian-fips, chainctl,...

CVE-2024-22036

A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-kafka, dockerize, envoy-ratelimit, velero, kubernetes-event-exporter, src, shfmt, pulumi-language-java, kor, lazygit, doppler-kubernetes-operator, wazero, kyverno-policy-reporter-kyverno-plugin, configmap-reload, scorecard, cert-exporter, temporal-server, k3d,...

Rancher Remote Code Execution via Cluster/Node Drivers

Impact A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher...

PT-2024-19169 · Rancher +1 · Rancher +1

Name of the Vulnerable Software and Affected Versions: Rancher versions prior to 2.7.16 Rancher versions prior to 2.8.9 Rancher versions prior to 2.9.3 Description: A vulnerability has been identified in Rancher where a cluster or node driver can be used to escape the chroot jail and gain root...

Privilege Escalation

github.com/rancher/rancher vulnerable to Privilege Escalation. The vulnerability is due to improper restrictions in node driver options, allowing unprivileged users to deploy nodes and post sensitive files such as /root/.kube/config or /var/lib/rancher/management-state/cred/kubeconfig-system.yaml...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, envoy-ratelimit, flux-source-controller, nri-kubernetes, velero, osv-scanner, cosign, kubernetes-event-exporter, src, terraform-provider-google, pulumi-language-java, kor, doppler-kubernetes-operator,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: spark-operator, buildkitd, bank-vaults-fips, kubevela, aactl, dynamic-localpv-provisioner-fips, src, slsa-verifier, smarter-device-manager-fips, k3d, volume-modifier-for-k8s-fips, prometheus-blackbox-exporter, terraform-provider-sendgrid, kubescape, up, falcoctl-fips...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, scorecard, spark-operator, kubevela, buildkitd, cortex, terraform-provider-sendgrid, src, kubeflow, k3d, slsa-verifier, kubescape, aactl, dgraph...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, flux-source-controller, cosign, src, ko, pulumi-language-java, nginx-mainline, scorecard, nghttp2, k3d, grpcurl, pulumi-kubernetes-operator, dex, memcached-exporter, hugo, minio, metacontroller, gitness, kubernetes-csi-livenessprobe, kubeflow,...

DEBIAN-CVE-2021-32050

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...

Rancher Privilege Escalation Vulnerability

In Rancher 1 and 2 through 2.2.3, unprivileged users if allowed to deploy nodes can gain admin access to the Rancher management plane because node driver options intentionally allow posting certain data to the cloud. The problem is that a user could choose to post a sensitive file such as...

RancherOS 1.6.x < 1.6.28 / 2.0.x < 2.0.15 / 2.1.x < 2.1.10 / 2.2.x < 2.2.4 Arbitrary File Read

In Rancher 1 and 2 through 2.2.3, unprivileged users if allowed to deploy nodes can gain admin access to the Rancher management plane because node driver options intentionally allow posting certain data to the cloud. The problem is that a user could choose to post a sensitive file such as...