Skip to content
OpenAdvisories
High · 8.1 CVE-2026-88805 EUVD-2026-88339

Session Not Revoked Server-Side on Logout in Rancher

Published Sep 28, 2026 · Updated Sep 29, 2026 · Assigned by suse

Description

Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.15.2.

Affected products

VendorProductAffectedFixed
SUSE Rancher 2.15.0 – < 2.15.2 2.15.2

References