7.7
High
CVE-2026-75035 A flaw was found in Rancher Manager
Description
A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner filter instead of returning an empty result. Any authenticated user could therefore list and watch every other user's tokens, disclosing token metadata and the stored salted hash of the bearer token. This issue affects Rancher: before 2.15.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rancher 2.15 | earliest → < 2.15.1 | 2.15.1 |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Rancher
The 86 CVEs of Rancher →
CVE-2026-88811
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud…
9.1
Critical
CVE-2026-88810
A privilege escalation issue was discovered in Rancher Manager's role-based access control
7.2
High
CVE-2026-88809
A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy)
7.6
High
CVE-2026-94290
SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent…
9.1
Critical