Vulnerability in SUSE Rancher
CVE-2026-104623
A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that was introduced to protect this feature was not applied to every API route that can reach it, so an alternative request form reached the shell handler without the access check being evaluated. This could allow any authenticated users to run a pod on the management cluster.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- github.com/rancher/rancher/security/advisories/GHSA-8x6f-2v58-x6p7 (vendor-advisory)
Frequently asked questions
- What is CVE-2026-104623?
- CVE-2026-104623 is a medium-severity vulnerability in SUSE Rancher, classified under Authentication Bypass by Spoofing. CVSS score: 6.3/10. Published 2026-10-30.
- How severe is CVE-2026-104623?
- Medium severity. CVSS v3 base score is 6.3 out of 10.
- Is CVE-2026-104623 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.