Skip to content
OpenAdvisories

Product · SUSE

Rancher

86 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-104623 Public exploit

    Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

    A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible olde…

    SUSE Rancher
  • Critical 9.6
    CVE-2026-88804 Public exploit Scanner template

    Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

    An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 befo…

    SUSE Rancher
  • Critical 9.9
    CVE-2025-62878 Public exploit

    Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

    A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.

    SUSE Rancher github.com/rancher/local-path-provisioner Go
  • Critical 9.9
    CVE-2021-36782 Public exploit

    Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object

    A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plaintext version of sensitive data. This issu…

    SUSE Rancher github.com/rancher/rancher Go