CVE-2026-55997

Name of the Vulnerable Software and Affected Versions Rancher (affected versions not specified)

Description Registration tokens used to authenticate nodes and agents joining a downstream cluster are issued without expiration and stored in plaintext. This allows an unauthorized user to obtain a token via the Rancher API, etcd, stored automation, or direct file access on a node, enabling the registration of a rogue node into the cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.