CVE-2026-88810

    Dashboard / Vulnerabilities / CVE-2026-88810

    CVE-2026-88810

    Published: 2 Nov 2026Last Modified: 4 Nov 2026

    Summary: Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules

    Details: A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalation validation applied to the other permission-carrying fields of a GlobalRole. As a result, a non-administrative user could be granted, through a global role  binding, permissions in downstream clusters that exceed the permissions that user already holds. This affected SUSE Rancher 2.15.2 only, and SUSE Rancher Webhook 0.11.0 up to 0.11.4, and 0.12.0 up to 0.12.1.

    References: https://github.com/rancher/rancher/, https://github.com/rancher/webhook/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/88xxx/CVE-2026-88810.json, https://github.com/rancher/webhook/security/advisories/GHSA-f898-2c8h-r7jc, https://nvd.nist.gov/vuln/detail/CVE-2026-88810

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 272e65580ca92b9dc51e0f0f0f9ae9d6d356e3b8
    Fixed -99ab89e90bf1d048f3f7acf7f05b132bf5a23a8e

    Affected versions

    v2.15.3-rc2
    v2.15.3-rc1
    v2.15.2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High