PT-2026-53314 · Suse · Rancher

·

CVE-2026-41052

·

Published

2026-06-29

·

Updated

2026-07-30

CVSS v4.0

9.4

Critical

VectorAV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions Rancher versions prior to 2.14.2 Rancher versions prior to 2.13.6 Rancher versions prior to 2.12.10
Description Improper privilege handling allows users assigned the Project Owner role to escalate their privileges.
Recommendations Update Rancher to version 2.14.2 or later. Update Rancher to version 2.13.6 or later. Update Rancher to version 2.12.10 or later.

Exploit

Fix

LPE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-41052
GHSA-VX8H-4PRV-G744
GO-2026-5876
OPENSUSE-SU-2026:21483-1

Affected Products

Rancher