CVE Tools
Track your stack

Rancher

100 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Rancher, a product in the devtools ci space. Use it to gauge the current risk picture and drill into individual advisories.

Rancher CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Rancher CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-049
2025-050
2025-060
2025-070
2025-080
2025-092
2025-105
2025-110
2025-120
2026-010
2026-022
2026-031
2026-040
2026-052
2026-067
2026-075
2026-085
2026-0912
2026-103
2026-114

Severity

How the 100 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1920%
  • High5355%
  • Medium2425%

Latest CVEs

The 15 most recently published vulnerabilities affecting Rancher.

  1. CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy9.1
  2. CVE-2026-88810Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules7.2
  3. CVE-2026-88809Rancher meta proxy allowlist bypass leading to server-side request forgery7.6
  4. CVE-2026-94290Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller9.1
  5. CVE-2026-104623Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster6.3
  6. CVE-2026-104615Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace7.9
  7. CVE-2024-22031Rancher users who can create Projects can gain access to arbitrary projects8.5
  8. CVE-2026-88804Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher9.6
  9. CVE-2026-88805Session Not Revoked Server-Side on Logout in Rancher8.1
  10. CVE-2026-88808Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters8.8
  11. CVE-2026-93540Fleet applies namespace labels and annotations without the bundle's service account privileges6.5
  12. CVE-2026-93539Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver5.4
  13. CVE-2026-93538Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet7.1
  14. CVE-2026-93537Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory6.5
  15. CVE-2026-75035Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass7.7

Product grouping is registry-driven, with AI assist and human review. How it works