{"id":"CVE-2026-88811","aliases":[],"cve":{"records":[{"id":"CVE-2026-88811","source":"suse","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-10T08:35:07.010Z","published":"2026-11-02T16:48:44.799Z","modified":"2026-11-03T04:55:53.397Z"}],"publishers":[{"name":"suse","role":"CNA","organizationId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","modified":"2026-11-02T16:48:44.799Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-03T04:55:53.397Z"}],"references":[{"url":"https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2","tags":["vendor-advisory"],"source":"suse"}],"weaknesses":[{"id":"CWE-201","description":"CWE-201 Insertion of sensitive information into sent data","source":"suse"}],"applicability":[{"source":"suse","statements":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"2.15.0","versionEndExcluding":"2.15.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"2.14.0","versionEndExcluding":"2.14.7"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"2.13.0","versionEndExcluding":"2.13.11"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"2.12.0","versionEndExcluding":"2.12.15"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"2.11.0","versionEndExcluding":"2.11.19"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-02T00:00:00+00:00","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"total"}]}]},"title":"Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy","titleSource":"suse","descriptionSource":"suse","description":"Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,","score":9.1,"severity":"critical","published":"2026-11-02T16:48:44.799Z","modified":"2026-11-03T04:55:53.397Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"SUSE","name":"Rancher","platforms":[],"versions":[{"version":"2.15.0","status":"affected","lessThan":"2.15.3","versionType":"semver"},{"version":"2.14.0","status":"affected","lessThan":"2.14.7","versionType":"semver"},{"version":"2.13.0","status":"affected","lessThan":"2.13.11","versionType":"semver"},{"version":"2.12.0","status":"affected","lessThan":"2.12.15","versionType":"semver"},{"version":"2.11.0","status":"affected","lessThan":"2.11.19","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"suse","url":"https://www.cve.org/CVERecord?id=CVE-2026-88811"}],"remediation":[],"references":["https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2"],"sources":[{"name":"CVE","id":"CVE-2026-88811","modified":"2026-11-03T04:55:53.397Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-88811"}],"assessments":[{"source":"suse","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","score":9.1}],"sourceAffected":[],"observedAt":"2026-11-03T05:12:47.728Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T04:55:31.932Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-11-02T17:00:38.613Z","attemptedAt":"2026-11-02T17:00:38.613Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-02T17:00:38.439Z","attemptedAt":"2026-11-02T17:00:38.439Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-02T17:00:37.587Z","attemptedAt":"2026-11-02T17:00:37.587Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-02T17:00:38.150Z","attemptedAt":"2026-11-02T17:00:38.150Z"}],"evidence":[],"aiSummary":{"text":"SUSE Rancher Manager meta proxy may leak Rancher credentials to cloud providers due to missing filtering. This affects versions 2.11.0 to 2.11.19, 2.12.0 to 2.12.15, 2.13.0 to 2.13.11, 2.14.0 to 2.14.7, and 2.15.0 to 2.15.3.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-02T18:56:19.922Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-88811"}]}}