Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation

A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials,…

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to…

A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to continue abusing this even after the token was renewed

An issue was discovered that affects the following versions of Rancher: v2.0.0 through v2.0.13, v2.1.0 through v2.1.8, and v2.2.0 through 2.2.1

Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

Command injection through unsanitized YAML parameter in Rancher

Cross-Cluster Impersonation Confused-Deputy Privilege Escalation

An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role template bindings or project role template bindings (such…

Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Over-inclusive team membership expansion in GitHub App authentication provider for Rancher

Rancher Privilege Escalation from Project Owner to Host

In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a…

A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the Rancher UI

A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to escalate permissions for any -promoted resource in any…

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain access to credentials

A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects:…

In Rancher 2 through 2.2.3, Project owners can inject additional fluentd configuration to read files or execute arbitrary commands inside the fluentd container

In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver options intentionally…

An issue was discovered in Rancher 2 through 2.1.5

Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call

Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole

Rancher users who can create Projects can gain access to arbitrary projects

Rancher Extensions have arbitrary file access via path traversal

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to to inject…

SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components

Session Not Revoked Server-Side on Logout in Rancher

In Rancher 2.0.0 through 2.1.5, project members have continued access to create, update, read, and delete namespaces in a project after they have been removed from it

An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local …

Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing

Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service

A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers

Rancher: SAML Assertion Replay

SAML Authentication Replay in Rancher

A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin

Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet

Exposed tokens in SUSE Rancher AI Agent logs

Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook

Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher

A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SUSE Rancher allows code execution for user with the ability to add…

A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption…

Fleet applies namespace labels and annotations without the bundle's service account privileges

Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory

Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass

A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs

Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rancher allows remote attackers to execute JavaScript via malicious links