CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
CriticalCVSS 9.1
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE Rancher | >= 2.15.0, < 2.15.3 | 2.15.3 |
| SUSE Rancher | >= 2.14.0, < 2.14.7 | 2.14.7 |
| SUSE Rancher | >= 2.13.0, < 2.13.11 | 2.13.11 |
| SUSE Rancher | >= 2.12.0, < 2.12.15 | 2.12.15 |
| SUSE Rancher | >= 2.11.0, < 2.11.19 | 2.11.19 |
References
- github.com vendor-advisory