CVE-2026-88811: Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
Published Nov 2, 2026
·Updated
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,
Event History
Nov 2, 2026
CVE Published
via OSV·04:48 PM
Data Sourced
via OSV·04:48 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which Rancher Manager versions are affected?
The affected versions are SUSE Rancher 2.15.0 through 2.15.3, 2.14.0 through 2.14.7, and 2.13.0 through 2.13.11.
2
Does exploitation require authentication or user interaction?
No. The supplied CVSS vector indicates network reachability, low attack complexity, no privileges required, and no user interaction.
3
What is the potential impact of exploitation?
Rancher credentials passed through the meta proxy could be disclosed to third-party cloud-provider hosts. The supplied CVSS vector rates confidentiality and integrity impact as high, with no availability impact indicated.