{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2025-67601","sourceIdentifier":"meissner@suse.de","published":"2026-02-25T11:16:02.643","lastModified":"2026-06-17T09:57:54.763","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the –cacert flag results in the CLI attempting to fetch CA certificates stored in Rancher’s setting cacerts."},{"lang":"es","value":"Una vulnerabilidad ha sido identificada dentro de Rancher Manager, donde el uso de certificados CA autofirmados y pasar la bandera -skip-verify al comando de inicio de sesión de Rancher CLI sin pasar también la bandera –cacert resulta en que la CLI intenta obtener certificados CA almacenados en la configuración 'cacerts' de Rancher."}],"affected":[{"source":"meissner@suse.de","affectedData":[{"vendor":"SUSE","product":"rancher","defaultStatus":"unaffected","packageName":"github.com/rancher/rancher","versions":[{"version":"0","lessThan":"0.0.0-20260129092249-bb0625fd1896","versionType":"semver","status":"affected"},{"version":"2.13.0","lessThan":"2.13.2","versionType":"semver","status":"affected"},{"version":"2.12.0","lessThan":"2.12.6","versionType":"semver","status":"affected"},{"version":"2.11.0","lessThan":"2.11.10","versionType":"semver","status":"affected"},{"version":"2.10.0","lessThan":"2.10.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"meissner@suse.de","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-26T04:55:52.856025Z","id":"CVE-2025-67601","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"meissner@suse.de","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"2.10.0","versionEndExcluding":"2.10.11","matchCriteriaId":"8434BB27-8099-4685-9FE5-C3E4FF565E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"2.11.0","versionEndExcluding":"2.11.10","matchCriteriaId":"4B7549C0-3315-469C-A43F-E8B7095E570D"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"2.12.0","versionEndExcluding":"2.12.6","matchCriteriaId":"81C70333-B5C6-4DAB-92B0-0FA49ED9CBE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"2.13.0","versionEndExcluding":"2.13.2","matchCriteriaId":"FDEACDC9-6A42-488C-AD8B-46E1B26CA943"}]}]}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-67601","source":"meissner@suse.de","tags":["Issue Tracking"]},{"url":"https://github.com/rancher/rancher/security/advisories/GHSA-mc24-7m59-4q5p","source":"meissner@suse.de","tags":["Vendor Advisory"]}]}}