CVE-2026-41053

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-41053", "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "state": "PUBLISHED", "assignerShortName": "suse", "dateReserved": "2026-04-16T13:37:50.680Z", "datePublished": "2026-06-30T11:38:25.060Z", "dateUpdated": "2026-07-01T03:55:47.962Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2026-06-30T11:38:25.060Z"}, "title": "Over-inclusive team membership expansion in GitHub App authentication provider for Rancher", "datePublic": "2026-05-28T11:31:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-303", "description": "CWE-303 Incorrect implementation of authentication algorithm", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "affected": [{"vendor": "SUSE", "product": "Rancher", "packageName": "Rancher", "repo": "https://github.com/rancher/rancher/", "modules": ["github auth provider"], "versions": [{"status": "affected", "version": "2.14.0", "lessThan": "2.14.2", "versionType": "semver"}, {"status": "affected", "version": "2.13.0", "lessThan": "2.13.6", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2."}]}], "references": [{"url": "https://github.com/rancher/rancher/security/advisories/GHSA-4j6x-2764-m8gh", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "source": {"defect": ["secsys_codex@163.com"], "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-30T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-41053"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-01T03:55:47.962Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-41053", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-30T12:08:45.633185Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-30T12:08:49.675Z"}}], "cna": {"title": "Over-inclusive team membership expansion in GitHub App authentication provider for Rancher", "source": {"defect": ["secsys_codex@163.com"], "discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/rancher/rancher/", "vendor": "SUSE", "modules": ["github auth provider"], "product": "Rancher", "versions": [{"status": "affected", "version": "2.14.0", "lessThan": "2.14.2", "versionType": "semver"}, {"status": "affected", "version": "2.13.0", "lessThan": "2.13.6", "versionType": "semver"}], "packageName": "Rancher", "defaultStatus": "unaffected"}], "datePublic": "2026-05-28T11:31:00.000Z", "references": [{"url": "https://github.com/rancher/rancher/security/advisories/GHSA-4j6x-2764-m8gh", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.", "supportingMedia": [{"type": "text/html", "value": "Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-303", "description": "CWE-303 Incorrect implementation of authentication algorithm"}]}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2026-06-30T11:38:25.060Z"}}}, "cveMetadata": {"cveId": "CVE-2026-41053", "state": "PUBLISHED", "dateUpdated": "2026-07-01T03:55:47.962Z", "dateReserved": "2026-04-16T13:37:50.680Z", "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "datePublished": "2026-06-30T11:38:25.060Z", "assignerShortName": "suse"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["github auth provider"], "packageName": "Rancher", "product": "Rancher", "repo": "https://github.com/rancher/rancher/", "vendor": "SUSE", "versions": [{"lessThan": "2.14.2", "status": "affected", "version": "2.14.0", "versionType": "semver"}, {"lessThan": "2.13.6", "status": "affected", "version": "2.13.0", "versionType": "semver"}]}], "source": "meissner@suse.de"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "matchCriteriaId": "53E5872E-9F92-4D2E-858D-4563A955B929", "versionEndExcluding": "2.13.6", "versionStartIncluding": "2.13.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "matchCriteriaId": "3CF3233E-9836-4A06-A063-C83D9AE88156", "versionEndExcluding": "2.14.2", "versionStartIncluding": "2.14.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2."}, {"lang": "es", "value": "El almacenamiento en cach\u00e9 incorrecto de la autenticaci\u00f3n en la expansi\u00f3n de la membres\u00eda del equipo del proveedor de autenticaci\u00f3n de Rancher Github caus\u00f3 que otorgara acceso principal a cualquier usuario que haya iniciado sesi\u00f3n, en 2.13 antes de 2.13.6 y 2.14 antes de 2.14.2."}], "id": "CVE-2026-41053", "lastModified": "2026-10-25T21:10:00.770", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "meissner@suse.de", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41053", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-30T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-06-30T12:16:23.580", "references": [{"source": "meissner@suse.de", "tags": ["Patch", "Vendor Advisory", "Mitigation"], "url": "https://github.com/rancher/rancher/security/advisories/GHSA-4j6x-2764-m8gh"}], "sourceIdentifier": "meissner@suse.de", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-303"}], "source": "meissner@suse.de", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.14.0,2.14.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.13.0,2.13.6)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Rancher", "source": "cna", "vendor": "SUSE"}, "product": "rancher", "vendor": "suse"}], "created": "2026-06-30T12:30:13.627103+00:00", "updated": "2026-06-30T18:00:06.403980+00:00", "vendors": ["suse", "suse$PRODUCT$rancher"]}