MEDIUM 6.3 NVD

CVE-2026-104623

A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14

A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that was introduced to protect this feature was not applied to every API route that can reach it, so an alternative request form reached the shell handler without the access check being evaluated. This could allow any authenticated users to run a pod on the management cluster.

References

https://github.com/rancher/rancher/security/advisories/GHSA-8x6f-2v58-x6p7

Published: 2026-10-30 · Source: NVD · Feed updated: 2026-10-30

This medium severity vulnerability with a CVSS score of 6.3 was published on 2026-10-30 via NVD.

vulnfeed aggregates 17712 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.