Suse: >> Rancher >> 2.14.0 Security Vulnerabilities
A SAML authentication replay vulnerability in Rancher's Assertion
Consumer Service (ACS) handler did not enforce
one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,
CVSS Score
9.5
EPSS Score
0.003
Published
2026-06-30
Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.
CVSS Score
8.8
EPSS Score
0.005
Published
2026-06-30
Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10.
CVSS Score
9.4
EPSS Score
0.004
Published
2026-06-29