How many SUSE rancher CVEs are in CISA KEV?

None of SUSE rancher's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for SUSE rancher vulnerabilities?

Yes — 2 of SUSE rancher's CVEs have a known public exploit.

Which versions of SUSE rancher are affected?

226 distinct SUSE rancher versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in SUSE rancher CVEs?

SUSE rancher's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-522 (Insufficiently Protected Credentials).

How many critical SUSE rancher vulnerabilities are there?

SUSE rancher has 18 critical and 40 high-severity CVEs.

What is the average severity of SUSE rancher CVEs?

The average CVSS base score across SUSE rancher's scored CVEs is 8.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

SUSE

72 CVEs

SUSE rancher Vulnerabilities

Name: SUSE rancher vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for rancher by SUSE.

72

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

8.0

Avg CVSS

2017–2026

Last updated July 7, 2026

Overview

SUSE rancher has 72 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting SUSE rancher, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of SUSE rancher's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical18

High40

Medium14

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of SUSE rancher's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of SUSE rancher's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every SUSE rancher version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

2.6.0 <= v < 2.6.105 CVEs
>= 2.7.14 CVEs
0.12.0 <= v < 0.12.154 CVEs
0.13.0 <= v < 0.13.114 CVEs
0.14.0 <= v < 0.14.64 CVEs
0.15.0 <= v < 0.15.24 CVEs
2.5.0 <= v < 2.5.174 CVEs
2.7.0 <= v < 2.7.14 CVEs
2.7.0 <= v < 2.7.144 CVEs
2.7.0 <= v < 2.7.44 CVEs
2.8.0 <= v < 2.8.54 CVEs
Rancher <= v < 2.5.174 CVEs
>= 2.6.103 CVEs
2.10.0 <= v < 2.10.103 CVEs
2.10.0 <= v < 2.10.33 CVEs
2.11.0 <= v < 2.11.63 CVEs
2.12.0 <= v < 2.12.23 CVEs
2.13.0 <= v < 2.13.63 CVEs
2.14.0 <= v < 2.14.23 CVEs
2.6.0 <= v < 2.6.43 CVEs
2.8.0 <= v < 2.8.133 CVEs
2.9.0 <= v < 2.9.123 CVEs
2.9.0 <= v < 2.9.73 CVEs
Rancher <= v < 2.5.133 CVEs
Rancher <= v < 2.6.43 CVEs
< 2.5.132 CVEs
2.0.0 <= v <= 2.1.52 CVEs
2.0.0 <= v <= 2.2.32 CVEs
2.12.0 <= v < 2.12.102 CVEs
2.13.0 <= v < 2.13.72 CVEs
2.14.0 <= v < 2.14.32 CVEs
2.5.0 <= v < 2.5.162 CVEs
2.6.0 <= v < 2.6.132 CVEs
2.6.0 <= v < 2.6.142 CVEs
2.6.0 <= v < 2.6.72 CVEs
2.7.0 <= v < 2.7.102 CVEs
2.8.0 <= v < 2.8.22 CVEs
2.9.0 <= v < 2.9.32 CVEs
2.9.0 <= v < 2.9.42 CVEs
Rancher <= v < 2.5.122 CVEs
Rancher <= v < 2.5.162 CVEs
Rancher <= v < 2.6.102 CVEs
Rancher <= v < 2.6.32 CVEs
Rancher <= v < 2.6.72 CVEs
wrangler <= v <= 0.7.32 CVEs
< 0.0.0-20250813072957-aee95d4e2a411 CVE
< 0.0.0-20251013203444-50dc516a19ea1 CVE
< 0.0.0-20251014212116-7faa74a968c21 CVE
< 0.0.0-20260129092249-bb0625fd18961 CVE
< 0.0.341 CVE
< 2.5.121 CVE
< 2.5.61 CVE
< 2175e091 CVE
< 6e303591 CVE
< c744f0b1 CVE
>= 2.7.31 CVE
0.10.0 <= v < 0.10.71 CVE
0.11.0 <= v < 0.11.101 CVE
0.11.0 <= v < 0.11.131 CVE
0.12.0 <= v < 0.12.141 CVE
0.12.0 <= v < 0.12.161 CVE
0.12.0 <= v < 0.12.61 CVE
0.13.0 <= v < 0.13.101 CVE
0.13.0 <= v < 0.13.121 CVE
0.14.0 <= v < 0.14.51 CVE
0.14.0 <= v < 0.14.71 CVE
0.15.0 <= v < 0.15.11 CVE
0.15.0 <= v < 0.15.31 CVE
0.7.0 <= v < 0.7.101 CVE
0.8.0 <= v < 0.8.71 CVE
0.9.0 <= v < 0.9.61 CVE
1.0.0 <= v < 1.0.21 CVE
1.0.0 <= v <= 1.6.281 CVE
1.2.0 <= v < 1.2.41 CVE
1.3.0 <= v < 1.3.51 CVE
1.4.0 <= v < 1.4.31 CVE
1.5.0 <= v < 1.5.31 CVE
2.0.0 <= v < 2.6.131 CVE
2.0.0 <= v <= 2.0.131 CVE
2.0.0 <= v <= 2.2.41 CVE
2.1.0 <= v <= 2.1.81 CVE
2.1.4 <= v <= 2.1.41 CVE
2.10.0 <= v < 2.10.111 CVE
2.10.0 <= v < 2.10.121 CVE
2.10.0 <= v < 2.10.41 CVE
2.10.0 <= v < 2.10.91 CVE
2.10.11 <= v < 2.11.131 CVE
2.11.0 <= v < 2.11.101 CVE
2.11.0 <= v < 2.11.141 CVE
2.11.0 <= v < 2.11.151 CVE
2.11.0 <= v < 2.11.51 CVE
2.12.0 <= v < 2.12.11 CVE
2.12.0 <= v < 2.12.111 CVE
2.12.0 <= v < 2.12.61 CVE
2.12.0 <= v < 2.12.91 CVE
2.13.0 <= v < 2.13.21 CVE
2.13.0 <= v < 2.13.51 CVE
2.14.0 <= v < 2.14.11 CVE
2.2.0 <= v <= 2.2.11 CVE
2.5.0 <= v < 2.5.131 CVE
2.5.0 <= v < 2.5.141 CVE
2.6.0 <= v < 2.6.31 CVE
2.6.0 <= v < 2.6.51 CVE
2.6.0 <= v <= 2.7.21 CVE
2.6.7 <= v < 2.6.131 CVE
2.7.0 <= v < 2.7.151 CVE
2.7.0 <= v < 2.7.161 CVE
2.7.0 <= v < 2.8.91 CVE
2.8.0 <= v < 2.8.101 CVE
2.8.0 <= v < 2.8.141 CVE
2.8.0 <= v < 2.8.81 CVE
2.8.0 <= v < 2.8.91 CVE
2.9.0 <= v < 2.9.111 CVE
2.9.0 <= v < 2.9.21 CVE
2.9.0 <= v < 2.9.81 CVE
6.0.0 <= v < 6.0.31 CVE
7.0.0 <= v < 7.0.51 CVE
8.0.0 <= v < 8.1.21 CVE
9.0.0 <= v < 9.0.11 CVE
Desktop <= v < V1 CVE
Rancher <= v < 2.4.181 CVE
Rancher <= v < 2.5.101 CVE
Rancher <= v < 2.5.141 CVE
Rancher <= v < 2.5.61 CVE
Rancher <= v < 2.6.51 CVE

Fixed in

2.6.105 CVEs
0.12.154 CVEs
0.13.114 CVEs
0.14.64 CVEs
0.15.24 CVEs
2.5.174 CVEs
2.6.134 CVEs
2.7.14 CVEs
2.7.144 CVEs
2.7.44 CVEs
2.8.54 CVEs
2.10.103 CVEs
2.10.33 CVEs
2.11.63 CVEs

Find a version

72 CVEs

Sort

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
CVE-2026-44938
Patch
CWE-522
High · CVSS 8.8
EPSS 0.4% (28th pct)2026-07-07
SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
CVE-2026-44937
Patch
CWE-918
High · CVSS 8.3
EPSS 0.4% (31th pct)2026-07-06
Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
CVE-2026-44936
Patch
CWE-918
Medium · CVSS 5.0
EPSS 0.3% (26th pct)2026-07-06
Exposed tokens in SUSE Rancher AI Agent logs
CVE-2026-44934
Patch
CWE-215
High · CVSS 7.0
EPSS 0.1% (2th pct)2026-07-06
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
CVE-2026-44935
Patch
CWE-1287
Critical · CVSS 9.9
EPSS 0.4% (34th pct)2026-07-02
Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler
CVE-2026-44948
Patch
CWE-23
Medium · CVSS 5.3
EPSS 0.3% (21th pct)2026-06-30
Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook
CVE-2026-44949
Patch
CWE-306
High · CVSS 7.0
EPSS 0.2% (14th pct)2026-06-30
Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher
CVE-2026-44947
Patch
CWE-281
Medium · CVSS 6.9
EPSS 0.2% (14th pct)2026-06-30
SAML Authentication Replay in Rancher
CVE-2026-44946
Patch
CWE-294
Critical · CVSS 9.5
EPSS 0.3% (21th pct)2026-06-30
Over-inclusive team membership expansion in GitHub App authentication provider for Rancher
CVE-2026-41053
Patch
CWE-303
High · CVSS 8.8
EPSS 0.5% (37th pct)2026-06-30
Rancher Privilege Escalation from Project Owner to Host
CVE-2026-41052
Patch
CWE-305
Critical · CVSS 9.4
EPSS 0.4% (34th pct)2026-06-29
Command injection through unsanitized YAML parameter in Rancher
CVE-2026-44939
Patch
CWE-95
Critical · CVSS 9.4
EPSS 1.3% (67th pct)2026-06-19
Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
CVE-2026-41050
Patch
CWE-863
Critical · CVSS 9.9
EPSS 0.4% (32th pct)2026-05-13
Rancher Extensions have arbitrary file access via path traversal
CVE-2026-25705
Patch
CWE-35
High · CVSS 8.4
EPSS 0.4% (29th pct)2026-05-13
Rancher Backup Operator pod's logs leak S3 tokens
CVE-2025-62879
Patch
CWE-532
Medium · CVSS 6.8
EPSS 0.3% (27th pct)2026-03-04
Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
CVE-2025-62878
Patch
CWE-23
Critical · CVSS 9.9
EPSS 0.6% (44th pct)2026-02-25
Rancher CLI skips TLS verification on Rancher CLI login command
CVE-2025-67601
Patch
CWE-295
High · CVSS 8.3
EPSS 0.2% (5th pct)2026-02-25
Rancher exposes sensitive information through audit logs
CVE-2024-58269
Patch
CWE-532
Medium · CVSS 4.3
EPSS 0.3% (19th pct)2025-10-29
Rancher user retains access to clusters despite Global Role removal
CVE-2023-32199
Patch
CWE-281
Medium · CVSS 4.3
EPSS 0.2% (11th pct)2025-10-29
Rancher update on users can deny the service to the admin
CVE-2024-58260
Patch
CWE-863
High · CVSS 7.6
EPSS 0.5% (37th pct)2025-10-02
Rancher CLI SAML authentication is vulnerable to phishing attacks
CVE-2024-58267
Patch
CWE-345
High · CVSS 8.0
EPSS 0.2% (12th pct)2025-10-02
Rancher sends sensitive information to external services through the `/meta/proxy` endpoint
CVE-2025-54468
Patch
CWE-200
Medium · CVSS 4.7
EPSS 0.3% (26th pct)2025-10-02
Rancher affected by unauthenticated Denial of Service
CVE-2024-58259
Patch
CWE-770
High · CVSS 8.2
EPSS 0.5% (39th pct)2025-09-02
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text
CVE-2024-52284
Patch
CWE-312
High · CVSS 7.7
EPSS 0.2% (12th pct)2025-09-02
Critical vulnerability · 2025-04-16
CVE-2023-32197
Patch
CWE-269
Critical · CVSS 9.4
EPSS 0.6% (45th pct)2025-04-16
Critical vulnerability · 2025-04-16
CVE-2024-22036
Patch
CWE-269
Critical · CVSS 9.1
EPSS 0.8% (52th pct)2025-04-16
High vulnerability · 2025-04-16
CVE-2024-52281
Patch
CWE-79
High · CVSS 8.9
EPSS 0.5% (41th pct)2025-04-16
High vulnerability · 2025-04-11
CVE-2024-52280
Patch
CWE-200
High · CVSS 7.7
EPSS 0.4% (36th pct)2025-04-11
Medium vulnerability · 2025-04-11
CVE-2024-52282
Patch
CWE-200
Medium · CVSS 6.2
EPSS 0.4% (35th pct)2025-04-11
Rancher's SAML-based login via CLI can be denied by unauthenticated users
CVE-2025-23387
Patch
CWE-200
Medium · CVSS 5.3
EPSS 0.5% (42th pct)2025-04-11

Showing 30 of 72

Common weakness types

The CWE weakness categories most often found in SUSE rancher CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many SUSE rancher CVEs were published each year.

2017

1

2019

7

2021

2

2022

10

2023

12

2024

7

2025

16

2026

17

Other SUSE products

Browse vulnerabilities for other products by SUSE.

kernel-devel11,898 CVEs kernel-source11,788 CVEs kernel-macros11,404 CVEs kernel-default11,398 CVEs kernel-syms11,398 CVEs kernel-default-devel11,359 CVEs kernel-docs11,058 CVEs kernel-rt10,877 CVEs

All SUSE vulnerabilities

Frequently asked questions

Common questions about SUSE rancher vulnerabilities.

How many CVEs does SUSE rancher have?: SUSE rancher has 72 published CVE records since 2017.
How many SUSE rancher CVEs are in CISA KEV?: None of SUSE rancher's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for SUSE rancher vulnerabilities?: Yes — 2 of SUSE rancher's CVEs have a known public exploit.
Which versions of SUSE rancher are affected?: 226 distinct SUSE rancher versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in SUSE rancher CVEs?: SUSE rancher's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-522 (Insufficiently Protected Credentials).
How many critical SUSE rancher vulnerabilities are there?: SUSE rancher has 18 critical and 40 high-severity CVEs.
What is the average severity of SUSE rancher CVEs?: The average CVSS base score across SUSE rancher's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track SUSE rancher vulnerabilities

Monitor new SUSE rancher vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

2.12.2

3 CVEs

2.13.63 CVEs

2.14.23 CVEs

2.5.133 CVEs

2.6.43 CVEs

2.8.133 CVEs

2.9.123 CVEs

2.9.73 CVEs

> 0.7.32 CVEs

2.12.102 CVEs

2.13.72 CVEs

2.14.32 CVEs

2.5.122 CVEs

2.5.162 CVEs

2.6.142 CVEs

2.6.32 CVEs

2.6.72 CVEs

2.7.102 CVEs

2.8.22 CVEs

2.8.92 CVEs

2.9.32 CVEs

2.9.42 CVEs

> 2.7.21 CVE

0.0.0-20250813072957-aee95d4e2a411 CVE

0.0.0-20251013203444-50dc516a19ea1 CVE

0.0.0-20251014212116-7faa74a968c21 CVE

0.0.0-20260129092249-bb0625fd18961 CVE

0.0.341 CVE

0.10.71 CVE

0.11.101 CVE

0.11.131 CVE

0.12.141 CVE

0.12.161 CVE

0.12.61 CVE

0.13.1-0.20250806151509-088bcbea7edb1 CVE

0.13.101 CVE

0.13.121 CVE

0.14.51 CVE

0.14.71 CVE

0.15.11 CVE

0.15.31 CVE

0.7.101 CVE

0.8.71 CVE

0.9.61 CVE

1.0.21 CVE

1.2.41 CVE

1.3.51 CVE

1.4.31 CVE

1.5.31 CVE

2.10.111 CVE

2.10.121 CVE

2.10.41 CVE

2.10.91 CVE

2.11.101 CVE

2.11.131 CVE

2.11.141 CVE

2.11.151 CVE

2.11.51 CVE

2.12.11 CVE

2.12.111 CVE

2.12.61 CVE

2.12.91 CVE

2.13.21 CVE

2.13.51 CVE

2.14.11 CVE

2.4.181 CVE

2.5.101 CVE

2.5.141 CVE

2.5.61 CVE

2.6.51 CVE

2.7.151 CVE

2.7.161 CVE

2.7.31 CVE

2.8.101 CVE

2.8.141 CVE

2.8.81 CVE

2.9.111 CVE

2.9.21 CVE

2.9.81 CVE

2175e091 CVE

6.0.31 CVE

6e303591 CVE

7.0.51 CVE

8.1.21 CVE

9.0.11 CVE

c744f0b1 CVE

V1 CVE