9.4 CriticalCWE-95
CVE-2026-44939
Command injection through unsanitized YAML parameter in Rancher
SUSERancher
Status
- Not in CISA KEV
- Fixed in version 2.14.2
Exploit probabilityEPSSchecked 25 Oct
1.3%probability of exploitation in the next 30 days
Higher than 70% of scored CVEs
SeverityCVSS
9.4Critical
Description NVD
A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/{token}_{clusterId}.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers.
Coverage 1 article · 1 outlet
- Rancher CVE-2026-44939 lets attackers hijack Kubernetes clustersSecurityOnline · first in our coverage · mentions it in passing