CVE-2026-44947
Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those permissions from a RoleTemplate.
| CWE | CWE-281 |
| Vendor | suse |
| Product | rancher |
| Published | Jun 30, 2026 |
| Last Updated | Jun 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for suse rancher
Be the first to know when new unknown vulnerabilities affecting suse rancher are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SUSE / Rancher
2.13.0 < 2.13.7 2.14.0 < 2.14.3
References
Credits
Isaac David