https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:33:26 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0563 certfr-2025-avi-0563 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0563 https://cve.radiocsirt.org/vuln/euvd-2026-273068 EUVD-2026-273068 https://cve.radiocsirt.org/vuln/euvd-2026-273068 https://cve.radiocsirt.org/vuln/fkie_cve-2025-23389 <p>A Improper Access Control vulnerability in SUSE rancher allows a local user to impersonate other identities through SAML Authentication on first login. This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.</p> <p>A Improper Access Control vulnerability in SUSE rancher allows a local user to impersonate other identities through SAML Authentication on first login. This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-23389 https://cve.radiocsirt.org/vuln/ghsa-mq23-vvg7-xfm4 <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>### Impact A vulnerability in Rancher has been discovered, leading to a local user impersonation through SAML Authentication on first login.</p> <p>The issue occurs when a SAML authentication provider (AP) is configured (e.g. Keycloak). A newly created AP user can impersonate any user on Rancher by manipulating cookie values during their initial login to Rancher. This vulnerability could also be exploited if a Rancher user (present on the AP) is removed, either manually or automatically via the [User Retention feature](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-user-retention) with delete-inactive-user-after.</p> <p>More precisely, Rancher validates only a subset of input from the SAML assertion request; however, it trusts and uses values that are not properly validated. An attacker could then configure the saml_Rancher_UserID cookie and the saml_Rancher_Action cookie so that the user principal from the AP will be added to the user specified by the attacker (from saml_Rancher_UserID). Rancher can then be deceived by setting saml_Rancher_UserID to the admin&#39;s user ID and saml_Rancher_Action to testAndEnable, thereby executing the vulnerable code path and leading to privilege escalation.</p> <p>Note that the vulnerability impacts all SAML APs available in Rancher. However the following Rancher deployments are not affected: 1. Rancher deployments not using SAML-based AP. 2. Rancher deployments using SAML-based AP, where all SAML users are already signed in…</p> <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>### Impact A vulnerability in Rancher has been discovered, leading to a local user impersonation through SAML Authentication on first login.</p> <p>The issue occurs when a SAML authentication provider (AP) is configured (e.g. Keycloak). A newly created AP user can impersonate any user on Rancher by manipulating cookie values during their initial login to Rancher. This vulnerability could also be exploited if a Rancher user (present on the AP) is removed, either manually or automatically via the [User Retention feature](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-user-retention) with delete-inactive-user-after.</p> <p>More precisely, Rancher validates only a subset of input from the SAML assertion request; however, it trusts and uses values that are not properly validated. An attacker could then configure the saml_Rancher_UserID cookie and the saml_Rancher_Action cookie so that the user principal from the AP will be added to the user specified by the attacker (from saml_Rancher_UserID). Rancher can then be deceived by setting saml_Rancher_UserID to the admin&#39;s user ID and saml_Rancher_Action to testAndEnable, thereby executing the vulnerable code path and leading to privilege escalation.</p> <p>Note that the vulnerability impacts all SAML APs available in Rancher. However the following Rancher deployments are not affected: 1. Rancher deployments not using SAML-based AP. 2. Rancher deployments using SAML-based AP, where all SAML users are already signed in…</p> https://cve.radiocsirt.org/vuln/ghsa-mq23-vvg7-xfm4 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14889-1 <p>govulncheck-vulndb-0.0.20250312T181707-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250312T181707-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14889-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0457 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Dateien zu manipulieren, administrative Rechte zu erlangen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Dateien zu manipulieren, administrative Rechte zu erlangen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0457