CVE-2026-88811
Received Received - Intake

Credential Leak in SUSE Rancher Manager Meta Proxy

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: SUSE

Description
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-88811

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
SUSE Rancher 2.15.0
SUSE Rancher 2.14.0
SUSE Rancher 2.13.0
SUSE Rancher 2.12.0
SUSE Rancher 2.11.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-201 The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a missing filtering mechanism in the SUSE Rancher Manager meta proxy. When requests are forwarded to cloud providers or third-party hosts, Rancher credentials like session cookies or API tokens are not properly removed. This could leak sensitive credentials to external parties during normal operations such as cluster provisioning.

Detection Guidance

Check Rancher Manager versions between 2.11.0 and 2.15.2 for potential exposure. Review proxy logs for outgoing requests to third-party hosts containing Rancher credentials or session tokens. Use network monitoring tools to detect unusual data transmission to cloud providers.

Impact Analysis

The impact includes potential unauthorized access to your Rancher control plane and managed clusters. Attackers could gain administrative privileges if exposed credentials are used. Both browser users and API clients are affected, with exposure happening silently during routine tasks.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR and HIPAA. Exposure of administrative credentials may result in data breaches, triggering regulatory penalties and loss of trust.

Mitigation Strategies

Upgrade Rancher Manager to patched versions (2.11.19, 2.12.15, 2.13.11, 2.14.7, or 2.15.3). Rotate all Rancher credentials and API tokens after upgrading. Restrict proxy access to trusted hosts only. Avoid using long-lived API tokens until the issue is resolved.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-88811. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...