Skip to content
fr Sign in
7.9 High

CVE-2026-104615 A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before…

Description

A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.17, 0.14.0 up to 0.14.12, 0.15.0 up t o 0.15.17 and 0.16.0 up to 0.16.3. The cluster identity claimed by a registration request was accepted without being bound to the registration token that the request was made with. As a result, a registration request could be associated with a managed cluster that was originally registered with a different registration token.

Affected products and versions

Product Affected versions Fixed in
Rancher 0.16 0.16.0 → < 0.16.3 0.16.3
Rancher 0.15 earliest → < 0.15.17 0.15.17
Rancher 0.14 0.14.0 → < 0.14.12 0.14.12
Rancher 0.13 0.13 → < 0.13.17 0.13.17
Rancher 0.12 earliest → 0.12 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Rancher

The 86 CVEs of Rancher →
CVE-2026-88811 Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud… 9.1 Critical CVE-2026-88810 A privilege escalation issue was discovered in Rancher Manager's role-based access control 7.2 High CVE-2026-88809 A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy) 7.6 High CVE-2026-94290 SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent… 9.1 Critical
Track this CVE