CVE-2026-41053 | BDVDB-2026-344591 Detail
SUSERancher
Description#
Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.
Impact#
CAPEC-233 Privilege Escalation
Weaknesses#
- CWE-303 Incorrect implementation of authentication algorithm
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.