Critical · 9.1 CVE-2026-88811 EUVD-2026-115330

Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

Published Nov 2, 2026 · Updated Nov 3, 2026 · Assigned by suse

Description

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,

Affected products

Vendor	Product	Affected	Fixed
SUSE	Rancher	2.15.0 – < 2.15.3, 2.14.0 – < 2.14.7, 2.13.0 – < 2.13.11, 2.12.0 – < 2.12.15, 2.11.0 – < 2.11.19	2.15.3

Advisories 1

WID-SEC-2026-4246 Rancher: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026

References

https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2 vendor-advisory