https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:56:35.137051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04694 bdu:2024-04694 2026-10-06T09:56:35.143233+00:00 bdu:2024-04694 https://cve.radiocsirt.org/vuln/euvd-2026-195998 EUVD-2026-195998 2026-10-06T09:56:35.143270+00:00 EUVD-2026-195998 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32191 fkie_cve-2023-32191 2026-10-06T09:56:35.143284+00:00

When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself. The information available in there allows non-admin users to escalate to admin.

 https://cve.radiocsirt.org/vuln/ghsa-6gr4-52w6-vmqx GHSA-6gr4-52w6-vmqx — rke's credentials are stored in the RKE1 Cluster state ConfigMap 2026-10-06T09:56:35.143311+00:00

Affected: Go: github.com/rancher/rke

### Impact

When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself. This cluster state object contains information used to set up the K8s cluster, which may include the following sensitive data:

- RancherKubernetesEngineConfig - RKENodeConfig - SSH username - SSH private key - SSH private key path - RKEConfigServices - ETCDService - External client key - BackupConfig - S3BackupConfig - AWS access key - AWS secret key - KubeAPIService - SecretsEncryptionConfig - K8s encryption configuration (contains encryption keys) - PrivateRegistries - User - Password - ECRCredentialPlugin - AWS access key - AWS secret key - AWS session token - CloudProvider - AzureCloudProvider - AAD client ID - AAD client secret - AAD client cert password - OpenstackCloudProvider - Username - User ID - Password - VsphereCloudProvider - GlobalVsphereOpts - User - Password - VirtualCenterConfig - User - Password - HarvesterCloudProvider - CloudConfig - CustomCloudProvider - BastionHost - User - SSH…

 https://cve.radiocsirt.org/vuln/gsd-2023-32191 gsd-2023-32191 2026-10-06T09:56:35.143364+00:00 gsd-2023-32191 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1397 WID-SEC-W-2024-1397 — Rancher: Mehrere Schwachstellen 2026-10-06T09:56:35.143376+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Dateien zu manipulieren, seine Privilegien zu erweitern oder vertrauliche Informationen offenzulegen.