[CVE-2026-41052] Improper privilege handling could be used by users with Project Owner role to escalate privileges, i…

Descripción técnica

Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10.

Puntuación CVSS

Score: 8.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Rancher — Suse

Debilidades (CWE)

CWE-305

Fuente oficial

Publicado en NIST NVD.