Skip to content
OpenAdvisories
High WID-SEC-2026-2600 5 CVEs

Rancher: Mehrere Schwachstellen

Published Jul 30, 2026 · Updated Aug 5, 2026 · Revision 3 · de-DE

Vendor: rancher Product: rancher Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.

Product

Rancher ist ein Werkzeug für die Verwaltung von Kubernetes-Container basierten Umgebungen.

Vulnerabilities 5

  • Critical 9.1
    CVE-2026-44945

    Cross-Cluster Impersonation Confused-Deputy Privilege Escalation

    A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transiti…

    SUSE Rancher
  • High 8.8
    CVE-2026-55997

    Long-lived Rancher registration token exposed in plaintext

    Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in plaintext with no expiration, so a malicious user could obtain one either through the Rancher API, etcd, store…

    rancher rancher
  • High 7.5
    CVE-2026-59675

    Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service

    When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. Because the audit middleware is positioned earlier in the handler chain than Rancher's APIBodyLimitingHandler, …

    SUSE Rancher
  • Medium 5.3
    CVE-2026-55998

    Cluster Existence Oracle via Unauthenticated Import Endpoint

    The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/private_regis…

    SUSE Rancher
  • Medium 4.3
    CVE-2026-55996

    Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent

    A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server itself use the dynamiclistener library to serve TLS traffic. Without an effect…

    SUSE Rancher

Revision history

  1. #3

    Referenz(en) aufgenommen: EUVD-2026-53298

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-53291, EUVD-2026-53290

  3. #1

    Initiale Fassung

References