CVE-2026-88809
Received Received - Intake

Meta Proxy Endpoint Security Bypass in SUSE Rancher

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: SUSE

Description
A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy). This endpoint is intended to forward requests only to  destinations that appear on a configured allowlist. The allowlist decision was evaluated in a  place where it could not stop a request from being forwarded, so a rejected destination was logged but the request was still handed to the proxy's transport. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and potentially older EOL versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-88809

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
SUSE Rancher 2.15.0
SUSE Rancher 2.14.0
SUSE Rancher 2.13.0
SUSE Rancher 2.12.0
SUSE Rancher 2.11.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy). The endpoint is supposed to only forward requests to destinations on an allowlist, but due to incorrect evaluation, requests to blocked destinations were still processed. This means unauthorized requests could be forwarded even if they were rejected by the allowlist.

Detection Guidance

To detect this vulnerability, check if your Rancher Manager version is within the affected range (2.11.0 to 2.15.3). Inspect logs for requests to the /meta/proxy endpoint that were logged as rejected but still forwarded. Monitor for unusual outbound requests from the Rancher server to internal services or cloud metadata endpoints.

Impact Analysis

An attacker could exploit this to send requests to unintended internal systems through the proxy, potentially accessing sensitive data or services. This could lead to data breaches, unauthorized access, or further network compromise depending on the proxy's configuration.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Organizations using affected SUSE Rancher versions may face compliance violations and potential penalties.

Mitigation Strategies

Upgrade SUSE Rancher to a patched version (2.15.4 or later, 2.14.8 or later, 2.13.12 or later, 2.12.16 or later, 2.11.20 or later) to address the meta proxy endpoint vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-88809. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...