An issue exists in the SUSE Rancher Manager meta proxy endpoint '/meta/proxy'. This endpoint is designed to forward requests only to destinations specified in a configured allowlist. However, the allowlist validation was implemented in a manner that failed to block requests to unauthorized destinations; while rejected destinations were logged, the requests were still processed and forwarded by the proxy transport.