CVE-2026-888119.1Critical
Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
SUSE · Rancher
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
9.1CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 3 Nov.
- SUSE fixes Rancher flaws exposing cloud credentials and shellsSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.