SAML Assertion Replay in Rancher 2.14.02.14.2 ACS
CVE-2026-44946 Published on June 30, 2026
SAML Authentication Replay in Rancher
A SAML authentication replay vulnerability in Rancher's Assertion
Consumer Service (ACS) handler did not enforce
one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,
Weakness Type
Authentication Bypass by Capture-replay
A capture-replay flaw exists when the design of the software makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes). Capture-replay attacks are common and can be difficult to defeat without cryptography. They are a subset of network injection attacks that rely on observing previously-sent valid commands, then changing them slightly if necessary and resending the same commands to the server.
Products Associated with CVE-2026-44946
Want to know whenever a new CVE is published for Suse Rancher? stack.watch will email you.
Affected Versions
SUSE Rancher:- Version 2.14.0 and below 2.14.3 is affected.
- Version 2.13.0 and below 2.13.7 is affected.
- Version 2.12.0 and below 2.12.11 is affected.
- Version 2.11.0 and below 2.11.15 is affected.