Description
In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a different project.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rancher | >= 2.6.0, < 2.6.13 | 2.6.13 | GHSA-8vhc-hwhc-cpj4 |
| Go | github.com/rancher/rancher | >= 2.7.0, < 2.7.4 | 2.7.4 | GHSA-8vhc-hwhc-cpj4 |
Advisories 1
- WID-SEC-2023-1340 Rancher: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 4, 2026