CVE-2026-104623
MEDIUM 1 PoC
MEDIUM
Priority: 0.02
BB Relevance:
73/100
Published: 2026-10-30
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Network
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
Low
I:
Low
A:
Low
Description
A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that was introduced to protect this feature was not applied to every API route that can reach it, so an alternative request form reached the shell handler without the access check being evaluated. This could allow any authenticated users to run a pod on the management cluster.
Weakness Classification (1)
Affected Software (10)
| Vendor | Product | Version |
|---|---|---|
| SUSE | Rancher | 2.15.0 < 2.15.3 |
| SUSE | Rancher | 2.14.0 < 2.14.7 |
| SUSE | Rancher | 2.13.0 < 2.13.11 |
| SUSE | Rancher | 2.12.0 < 2.12.15 |
| SUSE | Rancher | 2.11.0 < 2.11.19 |
| SUSE | Rancher | 2.15.0 < 2.15.3 |
| SUSE | Rancher | 2.14.0 < 2.14.7 |
| SUSE | Rancher | 2.13.0 < 2.13.11 |
| SUSE | Rancher | 2.12.0 < 2.12.15 |
| SUSE | Rancher | 2.11.0 < 2.11.19 |
References & Advisories (1)
vendor-advisory