[ CVE-2026-88811 · Published 2 Nov 2026 ]

Vulnerability in SUSE Rancher

CVSS 9.1 EPSS <1%1 agency advisoryNo fix listed yet

[ Why it matters ]Priority signals

Critical severity: CVSS 9.1

[ Description ]Official description

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

BSI CERT-Bund29 Oct 2026WID-SEC-2026-4246

Rancher: Multiple vulnerabilities Translated from German
CVE-2026-88809CVE-2026-104623CVE-2026-88811

[ References ]References

github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2

[ Why it matters ]Priority signals

[ Description ]Official description

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

Rancher: Multiple vulnerabilities Translated from German

[ References ]References