[CVE-2026-41053] Incorrect authentication caching in the team member ship expansion of the Rancher Github authenticat…

Descripción técnica

Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.

Puntuación CVSS

Score: 8.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Rancher — Suse

Debilidades (CWE)

CWE-303

Fuente oficial

Publicado en NIST NVD.