CVE-2026-104623
Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that was introduced to protect this feature was not applied to every API route that can reach it, so an alternative request form reached the shell handler without the access check being evaluated. This could allow any authenticated users to run a pod on the management cluster.
| CWE | CWE-290 |
| Vendor | suse |
| Product | rancher |
| Published | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for suse rancher
Be the first to know when new medium vulnerabilities affecting suse rancher are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
Affected Versions
SUSE / Rancher
2.15.0 < 2.15.3 2.14.0 < 2.14.7 2.13.0 < 2.13.11 2.12.0 < 2.12.15 2.11.0 < 2.11.19