CVE-2026-41053: Rancher: güvenlik açığı

Açıklama (NVD)

Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.

Özet bilgiler

Ürün

Suse Rancher

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,52 (yüzdelik 45)

CWE

CWE-303

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• CWE-303