SUSE Rancher vulnerabilities and fixes
Exploited and high-severity SUSE Rancher vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 9.1CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxyFix availableSUSE Rancher
1 min read - 7.2CVE-2026-88810Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRulesFix availableSUSE Rancher
1 min read - 9.1CVE-2026-94290Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controllerFix availableSUSE Rancher
1 min read - 7.6CVE-2026-88809Rancher meta proxy allowlist bypass leading to server-side request forgeryFix availableSUSE Rancher
1 min read