Suse

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Suse product.

RSS Feeds for Suse security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Suse products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Suse Sorted by Most Security Vulnerabilities since 2018

Suse Linux Enterprise Server424 vulnerabilities

Suse Linux Enterprise Desktop407 vulnerabilities

Suse Linux Enterprise Software Development Kit249 vulnerabilities

Suse Linux Enterprise Server108 vulnerabilities

Suse Linux Enterprise Workstation Extension96 vulnerabilities

Suse Rancher76 vulnerabilities

Suse Linux Enterprise59 vulnerabilities

Suse Linux Enterprise Debuginfo41 vulnerabilities

Suse Linux Enterprise High Availability Extension24 vulnerabilities

Suse Linux24 vulnerabilities

Suse Manager24 vulnerabilities

Suse Openstack Cloud21 vulnerabilities

Suse Manager Proxy14 vulnerabilities

Suse Neuvector14 vulnerabilities

Suse Studio Onsite8 vulnerabilities

Suse Linux Enterprise High Performance Computing7 vulnerabilities

Suse Linux Enterprise Real Time6 vulnerabilities

Suse Linux Enterprise Java5 vulnerabilities

Suse Linux Enterprise Server Sap5 vulnerabilities

Suse Package Hub3 vulnerabilities

Suse Github Com Neuvector Neuvector2 vulnerabilities

Suse Linux Enterprise Micro2 vulnerabilities

Suse Linux Enterprise Module Legacy2 vulnerabilities

Suse Manager Server Lts 4 31 vulnerability

Container Suse Manager 5 01 vulnerability

Suse Linux1 vulnerability

Suse Linux Enterprise Module Containers1 vulnerability

Opensuse1 vulnerability

By the Year

In 2026 there have been 63 vulnerabilities in Suse with an average score of 7.4 out of ten. Last year, in 2025 Suse had 29 security vulnerabilities published. That is, 34 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.13.

Year	Vulnerabilities	Average Score
2026	63	7.42
2025	29	7.29
2024	8	7.00
2023	20	7.84
2022	21	7.10
2021	11	6.57
2020	39	6.41
2019	13	7.09
2018	39	7.46

It may take a day or so for new Suse vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Suse Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-88804	Sep 28, 2026	Rancher UI XSS via Unauth Update of Public Settings (2.15.1) An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18.	Rancher
CVE-2026-88805	Sep 28, 2026	SUSE Rancher 2.15 Remote Credential Retention on Logout Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.15.2.	Rancher
CVE-2026-88808	Sep 28, 2026	SUSE Rancher Fleet 0.16 before 0.16.2: Agent Overwrites Config in Shared Clusters A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment. It affects multi-tenancy environments where different tenants share the same downstream clusters, for example different privileged or untrusted teams inside the same organization. This could lead to overwritten configuration files. This issue affected SUSE Rancher Fleet 0.16 before 0.16.2, 0.15 before 0.15.7, and 0.14 before 0.14.11.	Rancher
CVE-2026-93540	Sep 28, 2026	SUSE Rancher Fleet Privilege Mismatch: Namespace Update Escalation (pre 0.16.2) A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLabels and namespaceAnnotations options, the resulting namespace metadata update was not subject to the same authorization as the rest of the bundle's deployment. As a result, a bundle could change labels and annotations on a target namespace even when the identity it was pinned to was not authorized to modify that namespace. This affected SUSE Rancher Fleet 0.16 before 0.16.2, 0.15 before 0.15.7, 0.14 before 0.14.11, 0.13 before 0.13.16 and potentially older versions.	Rancher
CVE-2026-93539	Sep 28, 2026	SUSE Rancher Fleet 0.16 Unverified Secret Unauthorized Repo PollingInt Change A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is not configured, incoming webhook requests are accepted without verification, and processing a request can change the spec.pollingInterval field of a matching GitRepo resource in any namespace. A caller with network access to the webhook service and no Kubernetes credentials can therefore alter GitRepo configuration outside the namespaces they are authorized for. This only affects SUSE Rancher Fleet 0.16 before 0.16.2, older versions are not affected.	Rancher
CVE-2026-93538	Sep 28, 2026	SUSE Rancher Fleet <0.16.1 Cross-tenant Auth Bypass via Agent-Set Cluster Labels A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated cluster registration, cluster labels supplied by the registering agent, including labels in the reserved management.cattle.io/ namespace such as the cluster display name label, were applied to the resulting upstream Cluster object. Because Fleet resolves GitRepo and Bundle targets from those cluster labels, a party able to register a cluster into a Fleet workspace namespace shared with other tenants could cause its own cluster to satisfy targeting rules that administrators intended for a different cluster. This affects SUSE Rancher Fleet 0.16 before 0.16.1, 0.15 before 0.15.6, 0.14 before 0.14.10, 0.13 before 0.13.15, 0.12 before 0.12.19 and older versions.	Rancher
CVE-2026-93537	Sep 28, 2026	SUSE Rancher Fleet 0.16.x - LFI via GitRepo bundle content (before 0.16.2) A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or modify a GitRepo, can cause SUSE Rancher Fleet to read files from the filesystem of the environment that processes the bundle and include their contents in the generated Bundle resource. This can expose configuration or credential material that the user has no Kubernetes RBAC permission to read, including Helm registry credentials made available to the bundle-processing job when per-path Helm credentials are configured. This affects Fleet 0.16 before 0.16.2, 0.15 before 0.15.7, 0.14 before 0.14.11, 0.13 before 0.13.16, 0.12 before 0.12.20 and potentially older unsupported versions.	Rancher
CVE-2026-78424	Sep 28, 2026	NeuVector 5.4-5.6 Improper Parameter Handling Enables OS Command Injection Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write) permission or anyone with access to NeuVectors internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the complete compromise of the worker node. This affects NeuVector 5.4 before 5.4.11, NeuVector 5.5 before 5.5.4, NeuVector 5.6 before 5.6.2 and potentially older versions.	Neuvector
CVE-2026-78427	Sep 17, 2026	NeuVector admission webhook bypass via sidecar image exclusion (v<5.6.2) The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the image path is entirely controlled by the workload author, any user capable of deploying workloads can evade admission deny rules simply by naming their image path after one of these sidecar images.	Neuvector Github Com Neuvector Neuvector
CVE-2026-78425	Sep 17, 2026	NeuVector 5.6.1 SAML SSO Assertion Auth Bypass via IdP Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wiki, a ticketing system, an expenses tool, or anything they legitimately hold an account on can log into their system via SAML SSO. The IdP issues an assertion to them. If that assertion is presented to NeuVector, NeuVector accepts it because the only thing distinguishing "an assertion for NeuVector" from "an assertion for the wiki" is the element, and the `NotInAudience` warning that reports the mismatch is never read.	Neuvector Github Com Neuvector Neuvector
CVE-2026-78426	Sep 17, 2026	NeuVector JWT verifier accepts noncanonical Base64URL signatures (v5.6.1) The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of NeuVector, can continue using the non-expired token with equivalent spelling of the RSA signature field until the token validity expires.	Neuvector
CVE-2026-78428	Sep 17, 2026	Neuvector SSO Session Mixup in SAML/OIDC (<5.6.1) Auth Hijacking For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently	Neuvector
CVE-2026-44940	Sep 17, 2026	SUSE Observability rancher-extension-stackstate Exposes Service Tokens The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them securely. An attacker with minimal access could obtain the token to gain unauthorized access or escalate privileges within the observability environment.
CVE-2026-44950	Sep 10, 2026	Heap buffer overflow in libXfont2 fs_read_glyphs() fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (position, length) lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the allocation. A malicious font server can send overlapping source offsets -- for example 1000 glyphs each referencing {position:0, length:64} with nbytes=64. Each individual source range passes the existing validation, but the cumulative writes total 64000 bytes into a 64-byte destination buffer. This is a heap buffer overflow with attacker-controlled content.	Linux Enterprise Desktop Linux Enterprise Linux Enterprise Server And others...
CVE-2026-59679	Sep 10, 2026	OOB Heap Read in libXfont2 query glyphs (CVE-2026-59679) fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from num_extents in the separate FS_QueryXExtents16 reply. The two CARD32 fields are never cross-checked. A malicious or compromised font server can send a small num_extents (e.g. 1) in the extents reply, then a large num_chars (e.g. 100000) in the bitmaps reply. This causes attacker-controlled out-of-bounds heap read and writes.	Linux Enterprise Desktop Linux Enterprise Linux Enterprise Server And others...
CVE-2025-46808	Sep 09, 2026	Sensitive Info Logging in SUSE Neuvector Manager (<5.4.5) An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager containers log This issue affects neuvector: before 5.4.5.	Neuvector
CVE-2026-75036	Sep 03, 2026	Fleet Helm Templating (0.12-0.16) Clusters Metadata Disclosure A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a `GitRepo` resource can cause the Fleet controller to: - Disclose cluster metadata available to the templating context. - Reveal information about hosts reachable from the controller's network position. Because the disclosure channel is name resolution, it may remain effective in environments where outbound traffic is otherwise restricted. The disclosed information is limited to values exposed to the Fleet templating context and to name resolution results. Integrity and availability of managed clusters are not affected. This issue affects Fleet: from 0.12.0 before 0.12.19, from 0.13.0 before 0.13.15, from 0.14.0 before 0.14.10, from 0.15.0 before 0.15.6, and from 0.16.0 before 0.16.1.
CVE-2026-75035	Sep 03, 2026	Rancher Manager 2.15.1 - Token Store Owner Filter Bypass (CVE-2026-75035) A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner filter instead of returning an empty result. Any authenticated user could therefore list and watch every other user's tokens, disclosing token metadata and the stored salted hash of the bearer token. This issue affects Rancher: before 2.15.1.	Rancher
CVE-2026-75034	Sep 03, 2026	Rancher Manager 2.15.1 SAML Assertion Replay in HA Replicas (CVE-2026-75034) A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a captured assertion could replay it once against every other replica to obtain additional authenticated sessions as the victim. This issue affects Rancher: before 2.15.1.	Rancher
CVE-2026-75033	Sep 03, 2026	Rancher Manager <2.15.1: Project Secrets Leak via Namespace Annotation Spoof A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io/projectId` annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the annotation to a project ID from another cluster and have that project's secrets copied into a namespace under their control. This issue affects Rancher: before 2.15.1.	Rancher
CVE-2026-71404	Sep 03, 2026	Privilege Escalation in Rancher Manager <2.15.1 via GlobalRole Controller A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable `authz.management.cattle.io/cr-name` annotation and overwrote that object's rules without verifying ownership. A user with delegated GlobalRole create or update permission could point the annotation at any existing ClusterRole, such as `cluster-admin`, and revoke the permissions of every principal bound to it. The change persists after the malicious GlobalRole is deleted. This issue affects Rancher: before 2.15.1.	Rancher
CVE-2026-71403	Sep 03, 2026	Rancher Manager <2.15.1: '/v3/users' Immutable Username/PrincipalIds Bypass A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's `username` and `principalIds` fields. A user holding the `update` verb on `users.management.cattle.io` could inject a foreign identity provider principal into any account, so that the next login by the owner of that principal was bound to the victim's account and inherited its role bindings. This issue affects Rancher: before 2.15.1.	Rancher
CVE-2026-25706	Sep 01, 2026	SUSE yast2-samba-client <=5.0.4: OS Cmd Injection via AD content Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root on a machine being joined to that domain. This issue affects yast2-samba-client through 5.0.4.
CVE-2026-59681	Sep 01, 2026	OS Command Injection in yast2-auth-client via Unvalidated AD Config A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads testjoin invocations by interpolating configuration values into a single command string and passing that string to Open3.popen2 / Open3.capture2, which causes Ruby to run it through /bin/sh. The Organizational Unit (ou), dnshostname, AD user name and AD domain name values are neither validated nor shell-quoted.
CVE-2026-59680	Sep 01, 2026	OS Command Injection in yast2-users <=5.0.8 via Password Settings Tab An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, get_password_term() in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString(), which performs no numeric validation, and passed the resulting string to format_days_after_epoch(). That helper interpolated the value into a shell command executed via Ruby backticks without quoting or escaping. Impact: an administrator who manages users against an external/federated LDAP directory via `yast2 users` triggers root command execution the moment they view or edit that particular user's "Password Settings" tab. No "join domain" or trust setup is required, just browsing/editing one user entry. This issue affects yast2-users through 5.0.8.
CVE-2026-71402	Aug 27, 2026	wicked OOB Read in DHCPv4 Packet Capture (0.6.80) An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client (wickedd-dhcp4) reads up to ihl + 8 bytes at most 68 bytes past the end of the 1500-byte packet receive buffer. An unauthenticated attacker on the same network who sends a crafted DHCP/UDP packet can make the client parse adjacent heap memory as DHCP options, so that heap contents such as allocator metadata or pointer values can be interpreted into lease fields. The over-read is bounded to 68 bytes; no memory write, no attacker control over the adjacent bytes and no remote exfiltration primitive has been demonstrated. This issue affects wicked up to and including version 0.6.80.
CVE-2026-71401	Aug 27, 2026	Integer Underflow in wicked DHCPv4 Client (0.6.80) Out-of-Bounds Read An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the header length. An unauthenticated attacker on the same network can thereby trigger an out-of-bounds read past the receive buffer in the wicked DHCPv4 client (wickedd-dhcp4), which can crash the daemon depending on the process memory layout. No information disclosure has been demonstrated. This issue affects wicked up to and including version 0.6.80.
CVE-2026-44945	Aug 05, 2026	Rancher PrivEsc via Impersonate Middleware (Pre-2.14.2) A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it manages. This issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2.	Rancher
CVE-2026-25703	Aug 05, 2026	NeuVector 5.4.9 Auth Bypass & Data Leak via /network/graph API NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information.	Neuvector
CVE-2026-55998	Aug 05, 2026	SUSE Manager: Null Pointer, Enumeration in Systemtemplate PrivateRegistry The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/private_registry.go causes the request to return HTTP 502 Bad Gateway. For cluster IDs that do not exist, the endpoint returns HTTP 200. This observable difference in response codes constitutes a reliable enumeration oracle.	Rancher
CVE-2026-59675	Aug 05, 2026	Rancher Manager API Body Size Bypass Leads to DoS via Audit Logging When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. Because the audit middleware is positioned earlier in the handler chain than Rancher's APIBodyLimitingHandler, the body-size cap (default 1 MiB) is bypassed for requests that pass through the audit copyReqBody path. An unauthenticated attacker can send arbitrarily large request bodies to the public login endpoints, causing the Rancher Manager server process to allocate memory proportional to the supplied body size. With just a few concurrent connections, this can exhaust available memory and terminate the Rancher Manager plane process, making the Rancher API and UI unavailable and interrupting management of all downstream clusters.	Rancher
CVE-2026-55996	Aug 05, 2026	DoS via unbounded SAN growth in Rancher TLS listeners A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server itself use the dynamiclistener library to serve TLS traffic. Without an effective CN filter configured, dynamiclistener automatically appended to each serving certificate any hostname presented via Server Name Indication (SNI) in incoming TLS requests. An unauthenticated attacker with network access within the affected cluster could send a large number of TLS requests with distinct hostnames, causing the serving certificate to accumulate an unbounded number of Subject Alternative Names (SANs). Eventually, the certificate grows large enough that TLS handshakes fail with an excessive message size error, causing a denial of service on the affected listeners.	Rancher
CVE-2025-8412	Jul 14, 2026	SUSE VM Driver Pack Buffer Overflow via Registry A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an attacker with the ability to modify the registry to affect the integrity of the driver. We're not aware of a feasible way to exploit this currently. This issue affects Virtual Machine Driver Pack: before e7a602ec232756ead019bdf19d6d3b9d010cc94b.
CVE-2026-59674	Jul 14, 2026	openSUSE Suricata <8.0.5-2.1: Symlink Escalation to Root A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1.
CVE-2026-44938	Jul 07, 2026	CVE-2026-44938: Fleet Agent Deployer NamespaceLabel Injection A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeployment.spec.options.namespaceLabels) when applying them to the target namespace. An attacker with git push access to a Fleet-monitored repository could overwrite Pod Security Standards (PSS) enforcement labels on a target namespace. This allows the attacker to weaken admission controls and deploy workloads that PSS policies would otherwise block.	Rancher
CVE-2026-44937	Jul 06, 2026	SUSE Rancher Fleet <=0.15.1 Webhook request forgery leading to DoS Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.5 could be used by remote attackers to cause a denial of service or a downgrade attack on other repositories on the system.	Rancher
CVE-2026-44936	Jul 06, 2026	Missing helmRepoURLRegex filter on SUSE Rancher Fleet 0.15 leaks BasicAuth Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 forwards Helm authentication credentials (BasicAuth) to any URL specified in the helm.repo field of a fleet.yaml file, allowing attackers able to push to fleet monitored git repos to leak helm access credentials.	Rancher
CVE-2026-44934	Jul 06, 2026	SUSE Rancher AI Agent 1.0 Before 1.0.2: DEBUG Log Disclosure of API Keys A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, allowing local attackers to misuse respective gained data or credentials.	Rancher
CVE-2026-44935	Jul 02, 2026	SUSE Rancher Fleet 0.15+ CrossTenant Credential Leak via valuesFrom Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be used by owners of one tenant to access fleet credentials of other tenants.	Rancher
CVE-2026-44941	Jul 02, 2026	libzypp Path Traversal <17.38.12 via keyhint in repomd.xml A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious repository to inject or overwrite files in the target system as root.
CVE-2026-44948	Jun 30, 2026	Path Traversal in Rancher Fleet ImageScan (0.12.0-0.15.3) DoS A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the intended directory, causing a denial of service.	Rancher
CVE-2026-44949	Jun 30, 2026	Rancher FleetWorkspace (v0.7.0-0.10.7) Unauth Webhook Priv Esc A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to the in-cluster rancher-webhook service could submit a crafted admission payload and cause workspace-related Kubernetes objects to be created with attacker-chosen identity data.	Rancher
CVE-2026-44947	Jun 30, 2026	Rancher PRTB Reconciler before 2.14.4 PSA retain flaw A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those permissions from a RoleTemplate.	Rancher
CVE-2026-44946	Jun 30, 2026	SAML Assertion Replay in Rancher 2.14.02.14.2 ACS A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,	Rancher
CVE-2026-41053	Jun 30, 2026	Rancher 2.13/2.14 Auth Caching Grants Admin Access to Any User Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.	Rancher
CVE-2026-41052	Jun 29, 2026	Rancher <2.14.2 Improper Privilege Escalation via Project Owner Role Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10.	Rancher
CVE-2026-25707	Jun 29, 2026	libzypp RPath Traversal Pre-17.38.10 Allows Remote Exploit A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation.
CVE-2026-44939	Jun 19, 2026	Command Injection in Rancher Manager < 2.14.2 Import Endpoint (YAML) A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/{token}_{clusterId}.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers.	Rancher
CVE-2026-44942	Jun 18, 2026	Path Traversal in libzypp <17.38.13 / 16.22.19 A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content.
CVE-2025-71261	Jun 16, 2026	TLS Handshake Bypass in SUSE Harvester <1.8.0 (Virtualization/Rancher Manager) An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it to bypass TLS as a security control.