PT-2026-135536

CVE-2026-88811

·

Published

2026-11-02

·

Updated

2026-11-03

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions SUSE Rancher versions 2.15.0 through 2.15.2 SUSE Rancher versions 2.14.0 through 2.14.6 SUSE Rancher versions 2.13.0 through 2.13.10
Description A request filtering flaw in the meta proxy allows rancher credentials to be leaked to third-party cloud providers, potentially exposing them to outside parties.
Recommendations Update SUSE Rancher to version 2.15.3. Update SUSE Rancher to version 2.14.7. Update SUSE Rancher to version 2.13.11.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-201: Insertion of Sensitive Information Into Sent Data
Related identifiers
CVE-2026-88811
GHSA-X82X-2QJ6-5RM2
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com