by Kastro CVE-2026-88811
SUSE Rancher — Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
Description · from the CVE record
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,
Affected
ProductAffectedFixed inSource
Rancher2.15.0 – < 2.15.32.15.3CNA
Rancher2.14.0 – < 2.14.72.14.7CNA
Rancher2.13.0 – < 2.13.112.13.11CNA
Rancher2.12.0 – < 2.12.152.12.15CNA
Rancher2.11.0 – < 2.11.192.11.19CNA
Scores by source
suse (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total