CVE-2026-88811

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-88811", "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "state": "PUBLISHED", "assignerShortName": "suse", "dateReserved": "2026-09-10T08:35:07.010Z", "datePublished": "2026-11-02T16:48:44.799Z", "dateUpdated": "2026-11-03T04:55:53.397Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2026-11-02T16:48:44.799Z"}, "title": "Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy", "datePublic": "2026-11-02T16:41:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-201", "description": "CWE-201 Insertion of sensitive information into sent data", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-22", "descriptions": [{"lang": "en", "value": "CAPEC-22 Exploiting Trust in Client"}]}], "affected": [{"vendor": "SUSE", "product": "Rancher", "packageName": "Rancher", "repo": "https://github.com/rancher/rancher/", "versions": [{"status": "affected", "version": "2.15.0", "lessThan": "2.15.3", "versionType": "semver"}, {"status": "affected", "version": "2.14.0", "lessThan": "2.14.7", "versionType": "semver"}, {"status": "affected", "version": "2.13.0", "lessThan": "2.13.11", "versionType": "semver"}, {"status": "affected", "version": "2.12.0", "lessThan": "2.12.15", "versionType": "semver"}, {"status": "affected", "version": "2.11.0", "lessThan": "2.11.19", "versionType": "semver"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.15.0", "versionEndExcluding": "2.15.3"}, {"vulnerable": true, "criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.14.0", "versionEndExcluding": "2.14.7"}, {"vulnerable": true, "criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.13.0", "versionEndExcluding": "2.13.11"}, {"vulnerable": true, "criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.12.0", "versionEndExcluding": "2.12.15"}, {"vulnerable": true, "criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.11.0", "versionEndExcluding": "2.11.19"}]}]}], "descriptions": [{"lang": "en", "value": "Missing filtering in the SUSE\u00a0Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, "}]}], "references": [{"url": "https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "CRITICAL", "baseScore": 9.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}}], "credits": [{"lang": "en", "value": "Peter Matseykanets", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-02T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-88811"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-03T04:55:53.397Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-88811", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-02T17:13:23.240329Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T17:13:29.891Z"}}], "cna": {"title": "Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Peter Matseykanets"}], "impacts": [{"capecId": "CAPEC-22", "descriptions": [{"lang": "en", "value": "CAPEC-22 Exploiting Trust in Client"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/rancher/rancher/", "vendor": "SUSE", "product": "Rancher", "versions": [{"status": "affected", "version": "2.15.0", "lessThan": "2.15.3", "versionType": "semver"}, {"status": "affected", "version": "2.14.0", "lessThan": "2.14.7", "versionType": "semver"}, {"status": "affected", "version": "2.13.0", "lessThan": "2.13.11", "versionType": "semver"}, {"status": "affected", "version": "2.12.0", "lessThan": "2.12.15", "versionType": "semver"}, {"status": "affected", "version": "2.11.0", "lessThan": "2.11.19", "versionType": "semver"}], "packageName": "Rancher", "defaultStatus": "unaffected"}], "datePublic": "2026-11-02T16:41:00.000Z", "references": [{"url": "https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "Missing filtering in the SUSE\u00a0Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,", "supportingMedia": [{"type": "text/html", "value": "Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, ", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-201", "description": "CWE-201 Insertion of sensitive information into sent data"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2.15.3", "versionStartIncluding": "2.15.0"}, {"criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2.14.7", "versionStartIncluding": "2.14.0"}, {"criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2.13.11", "versionStartIncluding": "2.13.0"}, {"criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2.12.15", "versionStartIncluding": "2.12.0"}, {"criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2.11.19", "versionStartIncluding": "2.11.0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2026-11-02T16:48:44.799Z"}}}, "cveMetadata": {"cveId": "CVE-2026-88811", "state": "PUBLISHED", "dateUpdated": "2026-11-02T17:13:34.998Z", "dateReserved": "2026-09-10T08:35:07.010Z", "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "datePublished": "2026-11-02T16:48:44.799Z", "assignerShortName": "suse"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageName": "Rancher", "product": "Rancher", "repo": "https://github.com/rancher/rancher/", "vendor": "SUSE", "versions": [{"lessThan": "2.15.3", "status": "affected", "version": "2.15.0", "versionType": "semver"}, {"lessThan": "2.14.7", "status": "affected", "version": "2.14.0", "versionType": "semver"}, {"lessThan": "2.13.11", "status": "affected", "version": "2.13.0", "versionType": "semver"}, {"lessThan": "2.12.15", "status": "affected", "version": "2.12.0", "versionType": "semver"}, {"lessThan": "2.11.19", "status": "affected", "version": "2.11.0", "versionType": "semver"}]}], "source": "meissner@suse.de"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Missing filtering in the SUSE\u00a0Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,"}], "id": "CVE-2026-88811", "lastModified": "2026-11-03T05:18:53.400", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "meissner@suse.de", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-88811", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-02T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-11-02T17:17:45.793", "references": [{"source": "meissner@suse.de", "url": "https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2"}], "sourceIdentifier": "meissner@suse.de", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-201"}], "source": "meissner@suse.de", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.15.0,2.15.3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.14.0,2.14.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.13.0,2.13.11)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.12.0,2.12.15)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.11.0,2.11.19)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "inferred", "scores": [{"score": 100.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Rancher", "source": "cna", "vendor": "SUSE"}, "product": "rancher", "vendor": "suse"}], "created": "2026-11-02T18:45:13.292502+00:00", "updated": "2026-11-02T19:00:06.591860+00:00", "vendors": ["suse", "suse$PRODUCT$rancher"]}