Loading vulnerability…
Credential Disclosure in SUSE Rancher Manager Meta Proxy
CVE-2026-88811 is a missing-filtering vulnerability in the SUSE Rancher Manager meta proxy. Rancher credentials supplied to the proxy can be forwarded to cloud providers rather than filtered from outgoing requests, exposing sensitive authentication information. Affected version ranges are listed as 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, and 2.13.0 up to 2.13.11.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Rancher credentials can be disclosed to cloud providers receiving requests through the meta proxy. Misuse of exposed credentials could enable unauthorized access to Rancher resources and modifications within the credentials' permissions. The recorded CVSS v3.1 assessment assigns high confidentiality and integrity impacts and no availability impact.
No public exploits tracked yet. Mallory keeps watching.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.