19 matches found
CLEANSTART-2026-IN11841 Security fixes in rancher-webhook 0.7.10-r1
Package rancher-webhook version 0.7.10-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-56852, ghsa-gcjh-h69q-9w9g...
CLEANSTART-2026-BM39879 Security fixes in rancher-webhook 0.10.7-r1
Package rancher-webhook version 0.10.7-r1 fixes 2 vulnerabilities: CVE-2026-56852, CVE-2026-41178...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: azure-service-operator, tkn, spqr, argocd-image-updater, kubernetes-csi-external-health-monitor, openfga, caddy, tekton-chains, cluster-api-gcp-controller, datadog-operator, fluent-operator, kube-state-metrics, kubernetes-csi-external-attacher, datadog-agent, grafana...
GO-2025-3522 vulnerabilities
Vulnerabilities for packages: rancher-webhook-fips, rancher-agent...
GO-2024-2536 vulnerabilities
Vulnerabilities for packages: rancher-webhook...
GO-2025-3465 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-fleet, vcluster, aws-efs-csi-driver, kubernetes-csi-driver-nfs, nodetaint, argocd-image-updater, ip-masq-agent, yunikorn-k8shim, emissary, local-static-provisioner, kubernetes, kubernetes-dns-node-cache, argo-rollouts,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: opa-envoy, crossplane-provider-aws-rds, db-operator, delve, argocd-image-updater, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, src-fingerprint,...
CVE-2026-44949 Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook
A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to the in-cluster rancher-webhook service could submi...
CVE-2026-44949
Summary: CVE-2026-44949 pertains to a vulnerability in the Rancher FleetWorkspace mutating webhook handled by the in-cluster rancher-webhook service. Affected versions: 0.7.0–0.7.10, 0.8.0–0.8.7, 0.9.0–0.9.6, and 0.10.0–0.10.7. Impact: An unauthenticated attacker with network access to the webhoo...
CVE-2026-44949: Missing Authentication for Critical Function
A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to the in-cluster rancher-webhook service could submi...
PT-2026-53896
A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to the in-cluster rancher-webhook service could submi...
CVE-2026-32952 vulnerabilities
Vulnerabilities for packages: minio, spqr, nuclei, flux-source-controller, grafana, dex, flux, percona-server-mongodb-operator, cert-manager-cmctl, external-secrets-operator, kyverno, opentofu, rancher, seaweedfs, zot, juicefs, gitea, sftpgo-plugin-auth, teleport, cert-manager-istio-csr, telegraf...
GHSA-PJCQ-XVWQ-HHPJ vulnerabilities
Vulnerabilities for packages: minio, spqr, nuclei, flux-source-controller, grafana, dex, flux, percona-server-mongodb-operator, cert-manager-cmctl, external-secrets-operator, kyverno, opentofu, rancher, seaweedfs, zot, juicefs, gitea, sftpgo-plugin-auth, teleport, cert-manager-istio-csr, telegraf...
CVE-2026-32952 vulnerabilities
Vulnerabilities for packages: cert-manager-openshift-routes, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, sftpgo-plugin-auth, versitygw, bento-fips, kyverno-notation-aws-fips, flux-source-controller-fips, rclone, minio-fips, flux, cert-manager-csi-driver-fips,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: opa-envoy, sbomqs, delve, portieris, terraform-provider-sendgrid, extism, k8ssandra-operator, clickhouse-operator, neuvector-dbgen, argo-rollouts, nri-haproxy, dex, cluster-proportional-autoscaler, sonobuoy, kpt, nri-mysql, cert-manager-csi-driver, juicefs-csi-driver...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: tigera-operator, crossplane-provider-azure, dbmate, aactl, tigera-operator-fips, cosign, secrets-store-csi-driver-provider-gcp, glow, licenseclassifier, secrets-store-csi-driver-provider-azure, multus-cni, grpc-health-probe, metrics-agent-fips, cri-tools,...
CVE-2023-22651
Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into th...