CVE-2026-88811

Dashboard / Vulnerabilities / CVE-2026-88811

CVE-2026-88811

Summary: Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

Details: Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,

References: https://github.com/rancher/rancher/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/88xxx/CVE-2026-88811.json, https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2, https://nvd.nist.gov/vuln/detail/CVE-2026-88811