Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

SUSE Rancher2026-11-02 16:48 UTC1 min readRead in

AR EN

Summary

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,

Remediation

Inventory every SUSE Rancher deployment, including staging.
Upgrade SUSE Rancher to the fixed version for your release line, listed under Affected versions.
Confirm the running version after the upgrade.

References

Advisoryhttps://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected versions

Version	Fixed in
2.15.0 – <2.15.3	2.15.3
2.14.0 – <2.14.7	2.14.7
2.13.0 – <2.13.11	2.13.11
2.12.0 – <2.12.15	2.12.15
2.11.0 – <2.11.19	2.11.19

Weakness

CWE-201

Exploit probability (EPSS)

0.4%

Timeline

2026-11-02Publicly disclosed

Sources

CVE · NVD