CVE-2023-32196

Name of the Vulnerable Software and Affected Versions Rancher versions 2.7.0 through 2.7.13 Rancher versions 2.8.0 through 2.8.4

Description A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplate objects when external=true, which in specific scenarios can lead to privilege escalation.

Recommendations For Rancher versions 2.7.0 through 2.7.13, update to version 2.7.14 or later. For Rancher versions 2.8.0 through 2.8.4, update to version 2.8.5 or later. As a temporary workaround, consider restricting access to External RoleTemplates to minimize the risk of exploitation.