77 matches found
CVE-2026-55997
Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in plaintext with no expiration, so a malicious user could obtain one either through the Rancher API, etcd, stored automation, or direct file access on...
CVE-2026-55996 Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent
A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server itself use the dynamiclistener library to serve TLS traffic. Without an effective CN filter configured,...
OS Command Injection
github.com/rancher/rancher is vulnerable to OS Command Injection. The vulnerability is due to unsanitized YAML parameters in the /v3/import/tokenclusterId.yaml import endpoint, which allows a remote attacker to inject commands, break out of a container image, and execute malicious containers...
EUVD-2026-40304
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service ACS handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,...
CVE-2026-44946 SAML Authentication Replay in Rancher
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service ACS handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,...
CVE-2026-41052 Rancher Privilege Escalation from Project Owner to Host
Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10...
CVE-2026-44939 Command injection through unsanitized YAML parameter in Rancher
A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers...
Rancher cloud credentials can be used through proxy API by users without access
A vulnerability was discovered in Rancher 2.2.0 through the aforementioned patched versions, where cloud credentials weren't being properly validated through the Rancher API. Specifically through a proxy designed to communicate with cloud providers. Any Rancher user that was logged-in and aware o...
EUVD-2021-12217
Malware in sbrugna...
EUVD-2021-1233
Malware in sbrugna...
EUVD-2022-2822
Malicious code in bioql PyPI...
EUVD-2023-0404
Malicious code in bioql PyPI...
EUVD-2024-1195
Malicious code in bioql PyPI...
EUVD-2024-2981
Malicious code in bioql PyPI...
EUVD-2022-52825
Malicious code in bioql PyPI...
EUVD-2022-2020
Malicious code in bioql PyPI...
EUVD-2025-0078
Malicious code in bioql PyPI...
EUVD-2025-6275
Malicious code in bioql PyPI...