Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering

Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation

A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials,…

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to…

A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to continue abusing this even after the token was renewed

An issue was discovered that affects the following versions of Rancher: v2.0.0 through v2.0.13, v2.1.0 through v2.1.8, and v2.2.0 through 2.2.1

Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

Command injection through unsanitized YAML parameter in Rancher

Cross-Cluster Impersonation Confused-Deputy Privilege Escalation

Rancher Remote Code Execution via Cluster/Node Drivers

Rancher: Restricted Administrator can change Administrator's passwords

Exposure of vSphere's CPI and CSI credentials in Rancher

An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role template bindings or project role template bindings (such…

Stored Cross-site Scripting vulnerability in Rancher UI

Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Over-inclusive team membership expansion in GitHub App authentication provider for Rancher

Rancher Privilege Escalation from Project Owner to Host

Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider

In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a…

A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the Rancher UI

A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to escalate permissions for any -promoted resource in any…

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain access to credentials

A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects:…

In Rancher 2 through 2.2.3, Project owners can inject additional fluentd configuration to read files or execute arbitrary commands inside the fluentd container

In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver options intentionally…

An issue was discovered in Rancher 2 through 2.1.5

Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call

Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole

Rancher users who can create Projects can gain access to arbitrary projects

Rancher Extensions have arbitrary file access via path traversal

Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to to inject…

SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components

Rancher affected by unauthenticated Denial of Service

Unauthenticated stack overflow in /v3-public/authproviders API

Session Not Revoked Server-Side on Logout in Rancher

In Rancher 2.0.0 through 2.1.5, project members have continued access to create, update, read, and delete namespaces in a project after they have been removed from it

Rancher CLI SAML authentication is vulnerable to phishing attacks

Rancher agents can be hijacked by taking over the Rancher Server URL

An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local …

Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing

Rancher Fleet Helm Values are stored inside BundleDeployment in plain text

Users can issue watch commands for arbitrary resources

Rancher update on users can deny the service to the admin

Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service

A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers

Rancher: SAML Assertion Replay