Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers.
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- SUSE
- Product
- Rancher
- CVSS v3.1
- 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Exploitation
- SSVC none, automatable yes, impact total
- Weakness
- CWE-201
- Exposure class
- Developer platform
- NVD status
- Received
Why it ranks 45 (High)
- CVSS v3.1 9.1 critical
- SSVC: automatable
- SSVC: total technical impact
- Product class: developer platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-88811 on this site · NVD · CVE.org · Vulnpedia