9.4 CriticalCWE-305
CVE-2026-41052
Rancher Privilege Escalation from Project Owner to Host
SUSERancher
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 36% of scored CVEs
SeverityCVSS
9.4Critical
Description NVD
Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10.
Coverage 1 article · 1 outlet
- Rancher CVE-2026-44939 lets attackers hijack Kubernetes clustersSecurityOnline · first in our coverage