CVE search · CVE-2026-41053
CVE-2026-41053
high 8.8
Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- meissner@suse.de
- Weakness
- CWE-303
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | high 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
meissner@suse.deSecondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- suse · rancher
References
- https://github.com/rancher/rancher/security/advisories/GHSA-4j6x-2764-m8ghPatchVendor AdvisoryMitigation