CVE-2026-88809

Name of the Vulnerable Software and Affected Versions SUSE Rancher versions 2.15.0 through 2.15.3 SUSE Rancher versions 2.14.0 through 2.14.7 SUSE Rancher versions 2.13.0 through 2.13.11 SUSE Rancher versions 2.12.0 through 2.12.15 SUSE Rancher versions 2.11.0 through 2.11.19

Description An issue exists in the SUSE Rancher Manager meta proxy endpoint '/meta/proxy'. This endpoint is designed to forward requests only to destinations specified in a configured allowlist. However, the allowlist validation was implemented in a manner that failed to block requests to unauthorized destinations; while rejected destinations were logged, the requests were still processed and forwarded by the proxy transport.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.