{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-88811", "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "state": "PUBLISHED", "assignerShortName": "suse", "dateReserved": "2026-09-10T08:35:07.010Z", "datePublished": "2026-11-02T16:48:44.799Z", "dateUpdated": "2026-11-02T17:13:34.998Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2026-11-02T16:48:44.799Z"}, "title": "Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy", "datePublic": "2026-11-02T16:41:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-201", "description": "CWE-201 Insertion of sensitive information into sent data", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-22", "descriptions": [{"lang": "en", "value": "CAPEC-22 Exploiting Trust in Client"}]}], "affected": [{"vendor": "SUSE", "product": "Rancher", "packageName": "Rancher", "repo": "https://github.com/rancher/rancher/", "versions": [{"status": "affected", "version": "2.15.0", "lessThan": "2.15.3", "versionType": "semver"}, {"status": "affected", "version": "2.14.0", "lessThan": "2.14.7", "versionType": "semver"}, {"status": "affected", "version": "2.13.0", "lessThan": "2.13.11", "versionType": "semver"}, {"status": "affected", "version": "2.12.0", "lessThan": "2.12.15", "versionType": "semver"}, {"status": "affected", "version": "2.11.0", "lessThan": "2.11.19", "versionType": "semver"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.15.0", "versionEndExcluding": "2.15.3"}, {"vulnerable": true, "criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.14.0", "versionEndExcluding": "2.14.7"}, {"vulnerable": true, "criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.13.0", "versionEndExcluding": "2.13.11"}, {"vulnerable": true, "criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.12.0", "versionEndExcluding": "2.12.15"}, {"vulnerable": true, "criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.11.0", "versionEndExcluding": "2.11.19"}]}]}], "descriptions": [{"lang": "en", "value": "Missing filtering in the SUSE\u00a0Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, "}]}], "references": [{"url": "https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "CRITICAL", "baseScore": 9.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}}], "credits": [{"lang": "en", "value": "Peter Matseykanets", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-02T17:13:23.240329Z", "id": "CVE-2026-88811", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T17:13:34.998Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageName": "Rancher", "product": "Rancher", "repo": "https://github.com/rancher/rancher/", "vendor": "SUSE", "versions": [{"lessThan": "2.15.3", "status": "affected", "version": "2.15.0", "versionType": "semver"}, {"lessThan": "2.14.7", "status": "affected", "version": "2.14.0", "versionType": "semver"}, {"lessThan": "2.13.11", "status": "affected", "version": "2.13.0", "versionType": "semver"}, {"lessThan": "2.12.15", "status": "affected", "version": "2.12.0", "versionType": "semver"}, {"lessThan": "2.11.19", "status": "affected", "version": "2.11.0", "versionType": "semver"}]}], "source": "meissner@suse.de"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Missing filtering in the SUSE\u00a0Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,"}], "id": "CVE-2026-88811", "lastModified": "2026-11-02T17:17:45.793", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "meissner@suse.de", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-88811", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-02T17:13:23.240329Z", "version": "2.0.3"}}]}, "published": "2026-11-02T17:17:45.793", "references": [{"source": "meissner@suse.de", "url": "https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2"}], "sourceIdentifier": "meissner@suse.de", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-201"}], "source": "meissner@suse.de", "type": "Primary"}]}

{}

{}