CVE search · CVE-2026-41052
CVE-2026-41052
critical 9.4
Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- meissner@suse.de
- Weakness
- CWE-305
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | critical 9.4 | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
meissner@suse.deSecondary |
| CVSS 3.1 | high 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- suse · rancher
References
- https://github.com/rancher/rancher/security/advisories/GHSA-vx8h-4prv-g744PatchVendor Advisory