Medium severity · published Feb 25, 2026
CVE-2025-67601
Rancher CLI skips TLS verification on Rancher CLI login command
4.8
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the –cacert flag results in the CLI attempting to fetch CA certificates stored in Rancher’s setting cacerts.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
rancher · SUSE
before 0.0.0-20260129092249-bb0625fd1896; 2.13.0 before 2.13.2; 2.12.0 before 2.12.6; 2.11.0 before 2.11.10; 2.10.0 before 2.10.11 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-67601
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-67601
Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-67601
Vendor Advisory
https://github.com/rancher/rancher/security/advisories/GHSA-mc24-7m59-4q5p
More from rancher
9.9
CVE-2026-44935
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
9.9
CVE-2026-41050
Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
9.9
CVE-2025-62878
Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
9.9
CVE-2023-22651
Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation
9.9
CVE-2021-36783
A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials,…