RA
Product
rancher
59
CVEs
0
On KEV
9.9
Max CVSS
8
New 30D
Severity mix
Critical 11High 30Medium 18Low 0
Watch
Add rancher to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88808 | 8.8 | Sep 28 | Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters Affected: 0.16.0 before 0.16.2; 0.15.0 before 0.15.7; 0.14.0 before 0.14.11 |
| CVE-2026-44938 | 8.8 | Jul 7 | Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent Affected: 0.15.0 before 0.15.2; 0.14.0 before 0.14.6; 0.13.0 before 0.13.11; 0.12.0 before 0.12.15 |
| CVE-2026-41053 | 8.8 | Jun 30 | Over-inclusive team membership expansion in GitHub App authentication provider for Rancher Affected: 2.14.0 before 2.14.2; 2.13.0 before 2.13.6 |
| CVE-2026-41052 | 8.8 | Jun 29 | Rancher Privilege Escalation from Project Owner to Host Affected: 2.12.0 before 2.12.10; 2.13.0 before 2.13.6; 2.14.0 before 2.14.2 |
| CVE-2020-10676 | 8.8 | Dec 12 | In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a… Affected: 2.0.0 before 2.6.13; 2.7.0 before 2.7.4 |
| CVE-2023-22648 | 8.8 | Jun 1 | A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the Rancher UI Affected: 2.6.7 before 2.6.13; 2.7.0 before 2.7.4 |
| CVE-2022-43759 | 8.8 | Feb 7 | A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to escalate permissions for any -promoted resource in any… Affected: 2.5.0 before 2.5.17; 2.6.0 before 2.6.10 |
| CVE-2022-43757 | 8.8 | Feb 7 | A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain access to credentials Affected: 2.5.0 before 2.5.17; 2.6.0 before 2.6.10; 2.7.0 before 2.7.1 |
| CVE-2022-21953 | 8.8 | Feb 7 | A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects:… Affected: 2.5.0 before 2.5.17; 2.6.0 before 2.6.10; 2.7.0 before 2.7.1 |
| CVE-2019-12303 | 8.8 | Jun 6 | In Rancher 2 through 2.2.3, Project owners can inject additional fluentd configuration to read files or execute arbitrary commands inside the fluentd container Affected: 2.0.0 through 2.2.3 |
| CVE-2019-12274 | 8.8 | Jun 6 | In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver options intentionally… Affected: 1.0.0 through 1.6.28; 2.0.0 through 2.2.3 |
| CVE-2018-20321 | 8.8 | Apr 10 | An issue was discovered in Rancher 2 through 2.1.5 Affected: 2.0.0 through 2.1.5 |
| CVE-2017-7297 | 8.8 | Mar 29 | Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call Affected: 1.2.0 before 1.2.4; 1.3.0 before 1.3.5; 1.4.0 before 1.4.3; 1.5.0 before 1.5.3 |
| CVE-2026-71404 | 8.7 | Sep 3 | Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole Affected: before 2.15.1 |
| CVE-2024-22031 | 8.5 | Oct 15 | Rancher users who can create Projects can gain access to arbitrary projects Affected: 2.8.0 before 2.9.9; 2.10.0 before 2.10.5; 2.11.0 before 2.11.1 |
| CVE-2026-25705 | 8.4 | May 13 | Rancher Extensions have arbitrary file access via path traversal Affected: 2.14.0 before 2.14.1; 2.13.0 before 2.13.5; 2.12.0 before 2.12.9; 2.10.11 before 2.11.13 |
| CVE-2022-43760 | 8.4 | Jun 1 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to to inject… Affected: 2.6.0 before 2.6.13; 2.7.0 before 2.7.4 |
| CVE-2026-44937 | 8.2 | Jul 6 | SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components Affected: 0.15.0 before 0.15.2; 0.14.0 before 0.14.6; 0.13.0 before 0.13.11; 0.12.0 before 0.12.15 |
| CVE-2026-88805 | 8.1 | Sep 28 | Session Not Revoked Server-Side on Logout in Rancher Affected: 2.15.0 before 2.15.2 |
| CVE-2019-6287 | 8.1 | Apr 10 | In Rancher 2.0.0 through 2.1.5, project members have continued access to create, update, read, and delete namespaces in a project after they have been removed from it Affected: 2.0.0 through 2.1.5 |
| CVE-2023-22647 | 8.0 | Jun 1 | An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local … Affected: 2.6.0 before 2.6.13; 2.7.0 before 2.7.4 |
| CVE-2026-75033 | 7.7 | Sep 3 | Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing Affected: before 2.15.1 |
| CVE-2026-59675 | 7.5 | Aug 5 | Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service Affected: 2.14.0 before 2.14.4; 2.13.0 before 2.13.8; 2.12.0 before 2.12.12 |
| CVE-2021-36778 | 7.5 | May 2 | A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers Affected: before 2.5.12; 2.6.0 before 2.6.3 |
| CVE-2026-75034 | 7.4 | Sep 3 | Rancher: SAML Assertion Replay Affected: before 2.15.1 |
| CVE-2026-44946 | 7.4 | Jun 30 | SAML Authentication Replay in Rancher Affected: 2.14.0 before 2.14.3; 2.13.0 before 2.13.7; 2.12.0 before 2.12.11; 2.11.0 before 2.11.15 |
| CVE-2021-36784 | 7.2 | May 2 | A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin Affected: before 2.5.13; 2.6.0 before 2.6.4 |
| CVE-2026-93538 | 7.1 | Sep 28 | Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet Affected: 0.16.0 before 0.16.1; 0.15.0 before 0.15.6; 0.14.0 before 0.14.10; 0.13.0 before 0.13.15; 0.12.0 before 0.12.19 |
| CVE-2026-44934 | 7.0 | Jul 6 | Exposed tokens in SUSE Rancher AI Agent logs Affected: 1.0.0 before 1.0.2 |
| CVE-2026-44949 | 7.0 | Jun 30 | Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook Affected: 0.7.0 before 0.7.10; 0.8.0 before 0.8.7; 0.9.0 before 0.9.6; 0.10.0 before 0.10.7 |
Showing 30