CVE-2026-88810

Name of the Vulnerable Software and Affected Versions SUSE Rancher version 2.15.2 SUSE Rancher Webhook versions 0.11.0 through 0.11.4 SUSE Rancher Webhook versions 0.12.0 through 0.12.1

Description A privilege escalation issue exists in the role-based access control of Rancher Manager. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance. Because this field lacks the privilege-escalation validation applied to other permission-carrying fields of a GlobalRole, a non-administrative user could be granted permissions in downstream clusters that exceed their current privileges through a global role binding.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.