by Kastro
Paper/Archive/CVE-2026-44945

CVE-2026-44945

SUSE Rancher — Cross-Cluster Impersonation Confused-Deputy Privilege Escalation

EPSS 0.6%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 46.6.466 × 209.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it manages. This issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2.

Affected

ProductAffectedFixed inSource
Rancher2.11.0 – < 2.11.162.11.16CNA
Rancher2.12.0 – < 2.12.122.12.12CNA
Rancher2.13.0 – < 2.13.82.13.8CNA
Rancher2.14.0 – < 2.14.22.14.2CNA

Scores by source

suse (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchgithub.com/rancher/rancher/pull/55983advisorygithub.com/rancher/rancher/security/advisories/GHSA-v584-7w32-jwpqrefbugzilla.suse.com/show_bug.cgi?id=CVE-2026-44945