https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:39:48 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-225029 EUVD-2026-225029 https://cve.radiocsirt.org/vuln/euvd-2026-225029 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21953 <p>A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.</p> <p>A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-21953 https://cve.radiocsirt.org/vuln/ghsa-g25r-gvq3-wrq7 <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>### Impact</p> <p>An issue was discovered in Rancher where an authorization logic flaw allows an authenticated user on any downstream cluster to (1) open a shell pod in the Rancher `local` cluster and (2) have limited `kubectl` access to it. The expected behavior is that a user does not have such access in the Rancher `local` cluster unless explicitly granted.</p> <p>This issue does not allow the user to escalate privileges in the `local` cluster directly (this would require another vulnerability to be exploited).</p> <p>The security issue happens in two different ways:</p> <p>1. Shell pod access - This is when a user opens a shell pod in the Rancher UI to a downstream cluster that the user has permission to access. The web request can be intercepted using the browser&#39;s web inspector/network console or a proxy tool to change the shell&#39;s destination to the Rancher `local` cluster instead of the desired downstream cluster.</p> <p>- This flaw cannot be exploited to access a downstream cluster that the user has no permissions to.</p> <p>- The shell pod runs with a limited non-root user, reducing the severity of this issue. However, even as a non-root user, it is still possible download and run binaries inside the shell pod.</p> <p>- The blast radius of this issue can increase based on the configuration of the `local` cluster. For example:</p> <p>- If the `local` cluster has unlimited network access, e.g. to the Internet, the user can open a reverse network connection to the shell pod.</p> <p>- Or access the clo…</p> <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>### Impact</p> <p>An issue was discovered in Rancher where an authorization logic flaw allows an authenticated user on any downstream cluster to (1) open a shell pod in the Rancher `local` cluster and (2) have limited `kubectl` access to it. The expected behavior is that a user does not have such access in the Rancher `local` cluster unless explicitly granted.</p> <p>This issue does not allow the user to escalate privileges in the `local` cluster directly (this would require another vulnerability to be exploited).</p> <p>The security issue happens in two different ways:</p> <p>1. Shell pod access - This is when a user opens a shell pod in the Rancher UI to a downstream cluster that the user has permission to access. The web request can be intercepted using the browser&#39;s web inspector/network console or a proxy tool to change the shell&#39;s destination to the Rancher `local` cluster instead of the desired downstream cluster.</p> <p>- This flaw cannot be exploited to access a downstream cluster that the user has no permissions to.</p> <p>- The shell pod runs with a limited non-root user, reducing the severity of this issue. However, even as a non-root user, it is still possible download and run binaries inside the shell pod.</p> <p>- The blast radius of this issue can increase based on the configuration of the `local` cluster. For example:</p> <p>- If the `local` cluster has unlimited network access, e.g. to the Internet, the user can open a reverse network connection to the shell pod.</p> <p>- Or access the clo…</p> https://cve.radiocsirt.org/vuln/ghsa-g25r-gvq3-wrq7 https://cve.radiocsirt.org/vuln/gsd-2022-21953 gsd-2022-21953 https://cve.radiocsirt.org/vuln/gsd-2022-21953 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0197 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, seine Rechte zu erweitern und Code auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, seine Rechte zu erweitern und Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0197