Description
A missing clean-up in the legacy Project Role Template Binding (PRTB)
reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security
Admission (PSA) permissions after an administrator removes those
permissions from a RoleTemplate.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Rancher | 2.13.0 – < 2.13.7, 2.14.0 – < 2.14.3 | 2.13.7 |
Advisories 2
- NCSC-2026-0220 Kwetsbaarheden verholpen in Rancher door Rancher Labs NCSC-NL (Netherlands) · Jul 3, 2026
- WID-SEC-2026-2130 Rancher: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jun 30, 2026