Description
A SAML authentication replay vulnerability in Rancher's Assertion
Consumer Service (ACS) handler did not enforce
one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Rancher | 2.14.0 – < 2.14.3, 2.13.0 – < 2.13.7, 2.12.0 – < 2.12.11, 2.11.0 – < 2.11.15 | 2.14.3 |
Advisories 2
- NCSC-2026-0220 Kwetsbaarheden verholpen in Rancher door Rancher Labs NCSC-NL (Netherlands) · Jul 3, 2026
- WID-SEC-2026-2130 Rancher: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jun 30, 2026