CVE-2021-36782

CVE-2021-36782 concerns SUSE Rancher where sensitive fields, such as passwords, API keys and service account tokens, were stored in plaintext on Kubernetes objects (e.g., cluster.management.cattle.io) and exposed to authenticated users with cluster/project roles via the Kubernetes API. Affected R...

CVE-2021-36783

CVE-2021-36783 (Rancher info-disclosure) affects SUSE Rancher where credentials, passwords and API tokens stored in cleartext are exposed via API endpoints to authenticated users (Cluster Owners/Members, Project Owners/Members). Affected: Rancher versions before 2.6.4 (and 2.5.x before 2.5.13). R...

CVE-2023-22649

Summary of CVE-2023-22649 (Rancher Audit Log leak) A vulnerability in Rancher Audit Logging may leak sensitive data into audit logs. Affected deployments are those using the opt-in Audit Logging feature with AUDIT_LEVEL set to 1 or higher. The issue could expose headers, credentials, and other se...

CVE-2019-12274

CVE-2019-12274 affects Rancher 1 and 2 up to 2.2.3. Unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane by posting data via node driver options, enabling reading of sensitive files such as /root/.kube/config or /var/lib/rancher/management-state/cr...

CVE-2019-12303

In Rancher 2.x (up to 2.2.3), project owners can inject fluentd configuration to read files or execute arbitrary commands inside the fluentd container due to a flawed fluentd config handling (CVE-2019-12303). The issue is evidenced by multiple sources in the connected documents showing code-injec...

CVE-2023-22651

CVE-2023-22651 — SUSE Rancher Webhook misconfiguration during upgrade : A failure in Rancher’s admission webhook update logic can misconfigure the webhook, potentially enabling privilege escalations in clusters upgrading from 2.6.x or 2.7.x to 2.7.2. Affected systems that were fresh-installed to ...

CVE-2022-21951

The CVE-2022-21951 issue affects SUSE Rancher (Rancher) where a Cleartext Transmission of Sensitive Information vulnerability allows an attacker on the network to read and modify network data. The root cause is missing encryption of data transmitted over the network when a cluster is created from...

CVE-2021-36778

CVE-2021-36778 describes an information/exposure risk in SUSE Rancher where administrators of third‑party repositories can gather credentials sent to Rancher servers due to an Incorrect Authorization flaw. Affected versions are Rancher prior to 2.5.12 and prior to 2.6.3. The issue enables credent...

CVE-2023-22648

CVE-2023-22648 describes an improper privilege management vulnerability in SUSE Rancher where permission changes in Azure AD are not reflected for users currently logged into the Rancher UI. This can allow users to retain prior permissions after group changes or removals in Azure AD, effectively ...

CVE-2026-41052

Rancher CVE-2026-41052 describes improper privilege handling that enables users with the Project Owner role to escalate to host-level privileges. Affected releases include Rancher 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10. The entry provides a CVSS v4.0 score of 9.4 (CRITICA...

CVE-2022-31247

CVE-2022-31247 concerns an improper authorization flaw in SUSE Rancher. The vulnerability allows a user with permissions to create/edit cluster role template bindings or project role template bindings (e.g., cluster-owner, manage cluster members, project-owner, manage project members) to gain own...

CVE-2021-36784

CVE-2021-36784 describes an Improper Privilege Management vulnerability in SUSE Rancher where users with the restricted-admin role can escalate to full admin. Affected are Rancher releases prior to 2.5.13 (and prior to 2.6.4 for the 2.6 line). The issue arises from how Global Roles can be edited/...

CVE-2021-4200

CVE-2021-4200 in SUSE Rancher is an improper privilege management issue that lets any user with catalog access write to CatalogTemplates and CatalogTemplateVersions when the restricted-admin role is enabled. Affected Rancher versions are prior to 2.5.13 and prior to 2.6.4; patched releases are 2....

CVE-2019-13209

CVE-2019-13209 affects Rancher Server 2.x up to 2.2.4, vulnerable to Cross-Site Websocket Hijacking (CSWSH). The attack requires a logged-in Rancher user to visit a third-party site hosted by the attacker; the attacker can then issue commands against the cluster’s Kubernetes API using the victim’...

CVE-2022-43755

SUSE Rancher CVE-2022-43755 is an Insufficient Entropy issue in the cattle-token used by the cattle-cluster-agent. The vulnerability affects Rancher versions prior to 2.6.10 and 2.7.1, where the token could be abused even after renewal due to predictable randomness. Patched versions include 2.6.1...

CVE-2023-22647

CVE-2023-22647 describes an Improper Privilege Management vulnerability in SUSE Rancher that lets standard users manipulate Kubernetes secrets in the local cluster, deleting secrets while retaining read permissions, potentially gaining access to service account tokens after additional crafted act...

CVE-2022-43758

CVE-2022-43758 is an OS Command Injection vulnerability in SUSE Rancher’s Git package that allows code execution when a user adds an untrusted Helm catalog or corrupts the KDM URL configuration. Affected Rancher versions include 2.5.x before 2.5.17, 2.6.x before 2.6.10, and 2.7.x before 2.7.1. Th...

CVE-2022-43760

CVE-2022-43760 is a Cross-Site Scripting vulnerability in SUSE Rancher UI caused by improper input neutralization during web page generation. The issue affects Rancher releases 2.6.0 up to 2.6.13 and 2.7.0 up to 2.7.4. An attacker with access to higher-privilege groups can inject code that runs i...

CVE-2026-41053

CVE-2026-41053 affects Rancher’s GitHub authentication provider, specifically the team membership expansion, where an incorrect authentication caching flaw could grant principal access to any logged-in user. Affected versions are 2.13 prior to 2.13.6 and 2.14 prior to 2.14.2. Root cause: faulty c...

CVE-2020-10676

In Rancher 2.x before 2.6.13 and in 2.7.x before 2.7.4, an incorrectly applied authorization check allows users with certain namespace access to move that namespace to a different project. This misconfiguration lets affected users potentially access project-specific resources (e.g., secrets) and ...

CVE-2022-21953

CVE-2022-21953 describes a Missing Authorization vulnerability in SUSE Rancher that lets an authenticated user create an unauthorized shell pod and obtain kubectl access in the local cluster. Affected are Rancher releases prior to 2.5.17, prior to 2.6.10, and prior to 2.7.1. SUSE reports patches ...

CVE-2022-43757

CVE-2022-43757 is a Cleartext Storage of Sensitive Information vulnerability affecting SUSE Rancher before patched versions. The issue allows users on managed clusters to access credentials stored in plaintext on Kubernetes objects, with impact depending on the exposed credentials. Affected relea...

CVE-2018-20321

This CVE (CVE-2018-20321) affects Rancher 2.x (through 2.1.5). A project member with access to the default namespace can mount the kubernetes default service account in a pod and use it to run privileged commands against the Kubernetes cluster. The documented mitigation is to isolate the default ...

CVE-2019-11881

Summary: CVE-2019-11881 affects Rancher server versions prior to 2.2.4, in the login component. The vulnerability arises from tampering with the “errorMsg” parameter, which can display arbitrary content after filtering tags but not special characters, enabling attackers to lure users to phishing ...

CVE-2022-43759

CVE-2022-43759 concerns SUSE Rancher where an improper privilege management flaw allows escalation of permissions via the escalate verb on project role template bindings (PRTBs) to affect any "-promoted" resource in any cluster. Affected Rancher versions include 2.5.x prior to 2.5.17 and 2.6.x pr...

CVE-2019-11202

CVE-2019-11202 affects Rancher versions v2.0.0–v2.0.13, v2.1.0–v2.1.8, and v2.2.0–v2.2.1. On first start Rancher creates a default admin user with a well-known password; after initial setup, the admin can delete it, but upon restart the default user is recreated with the same password. An attacke...

CVE-2017-7297

CVE-2017-7297 affects Rancher Server (Rancher Labs) 1.2.0+ where an authenticated user can disable access control via an API call. The vulnerability stemms from improper access control enforcement exposed through the Rancher API, enabling unauthorized modification of access controls. Impact is re...

CVE-2019-6287

CVE-2019-6287 concerns Rancher 2.0.0–2.1.5, where project members removed from a project can still create, update, read, and delete namespaces within that project. The root cause described in connected sources is improper access control due to incomplete cleanup of roleBindings when members are r...

CVE-2026-44946

CVE-2026-44946 describes a SAML authentication replay vulnerability in Rancher’s Assertion Consumer Service (ACS) handler, where one-time use of SAML assertions was not enforced. The issue can enable man‑in‑the‑middle style abuse against Rancher, affecting Rancher 2.14.0 up to (but not including)...

CVE-2021-25313

CVE-2021-25313 is a Cross-site Scripting vulnerability in SUSE Rancher (Rancher) prior to version 2.5.6. The root cause is improper neutralization of input during web page generation, allowing remote attackers to execute JavaScript via malicious links. Exploitation details are not provided in the...

CVE-2025-67601

CVE-2025-67601 – Rancher CLI TLS verification bypass : Multiple sources confirm a vulnerability in Rancher CLI login where using self-signed CA certificates with -skip-verify and without --cacert can cause the CLI to fetch CA certs from Rancher’s cacerts setting, enabling potential information ex...