8.3
High
CVE-2025-67601 A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the…
Description
A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the –cacert flag results in the CLI attempting to fetch CA certificates stored in Rancher’s setting cacerts.
Affected products and versions
Other CVEs of Rancher
The 86 CVEs of Rancher →
CVE-2026-88811
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud…
9.1
Critical
CVE-2026-88810
A privilege escalation issue was discovered in Rancher Manager's role-based access control
7.2
High
CVE-2026-88809
A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy)
7.6
High
CVE-2026-94290
SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent…
9.1
Critical