{"api_version":"1","generated_at":"2026-11-10T07:17:28+00:00","cve":"CVE-2026-88811","urls":{"html":"https://cve.report/CVE-2026-88811","api":"https://cve.report/api/cve/CVE-2026-88811.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-88811","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-88811"},"summary":{"title":"Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy","description":"Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,","state":"PUBLISHED","assigner":"suse","published_at":"2026-11-02 17:17:45","updated_at":"2026-11-03 05:18:53"},"problem_types":["CWE-201","CWE-201 CWE-201 Insertion of sensitive information into sent data"],"metrics":[{"version":"3.1","source":"meissner@suse.de","type":"Secondary","score":"9.1","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"9.1","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"}}],"references":[{"url":"https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2","name":"https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2","refsource":"meissner@suse.de","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-88811","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88811","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"SUSE","product":"Rancher","version":"affected 2.15.0 2.15.3 semver","platforms":[]},{"source":"CNA","vendor":"SUSE","product":"Rancher","version":"affected 2.14.0 2.14.7 semver","platforms":[]},{"source":"CNA","vendor":"SUSE","product":"Rancher","version":"affected 2.13.0 2.13.11 semver","platforms":[]},{"source":"CNA","vendor":"SUSE","product":"Rancher","version":"affected 2.12.0 2.12.15 semver","platforms":[]},{"source":"CNA","vendor":"SUSE","product":"Rancher","version":"affected 2.11.0 2.11.19 semver","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Peter Matseykanets","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"88811","cve":"CVE-2026-88811","epss":"0.004270000","percentile":"0.369890000","score_date":"2026-11-03","updated_at":"2026-11-04 00:14:35"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-88811","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-02T00:00:00+00:00","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-11-03T04:55:53.397Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","packageName":"Rancher","product":"Rancher","repo":"https://github.com/rancher/rancher/","vendor":"SUSE","versions":[{"lessThan":"2.15.3","status":"affected","version":"2.15.0","versionType":"semver"},{"lessThan":"2.14.7","status":"affected","version":"2.14.0","versionType":"semver"},{"lessThan":"2.13.11","status":"affected","version":"2.13.0","versionType":"semver"},{"lessThan":"2.12.15","status":"affected","version":"2.12.0","versionType":"semver"},{"lessThan":"2.11.19","status":"affected","version":"2.11.0","versionType":"semver"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionEndExcluding":"2.15.3","versionStartIncluding":"2.15.0","vulnerable":true},{"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionEndExcluding":"2.14.7","versionStartIncluding":"2.14.0","vulnerable":true},{"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionEndExcluding":"2.13.11","versionStartIncluding":"2.13.0","vulnerable":true},{"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionEndExcluding":"2.12.15","versionStartIncluding":"2.12.0","vulnerable":true},{"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionEndExcluding":"2.11.19","versionStartIncluding":"2.11.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"credits":[{"lang":"en","type":"finder","value":"Peter Matseykanets"}],"datePublic":"2026-11-02T16:41:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, "}],"value":"Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,"}],"impacts":[{"capecId":"CAPEC-22","descriptions":[{"lang":"en","value":"CAPEC-22 Exploiting Trust in Client"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-201","description":"CWE-201 Insertion of sensitive information into sent data","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-02T16:48:44.799Z","orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","shortName":"suse"},"references":[{"tags":["vendor-advisory"],"url":"https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2"}],"source":{"discovery":"EXTERNAL"},"title":"Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy","x_generator":{"engine":"Vulnogram 1.0.5"}}},"cveMetadata":{"assignerOrgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","assignerShortName":"suse","cveId":"CVE-2026-88811","datePublished":"2026-11-02T16:48:44.799Z","dateReserved":"2026-09-10T08:35:07.010Z","dateUpdated":"2026-11-03T04:55:53.397Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-02 17:17:45","lastModifiedDate":"2026-11-03 05:18:53","problem_types":["CWE-201","CWE-201 CWE-201 Insertion of sensitive information into sent data"],"metrics":{"cvssMetricV31":[{"source":"meissner@suse.de","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-02T00:00:00+00:00","id":"CVE-2026-88811","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"88811","Ordinal":"1","Title":"Rancher credentials disclosed to third-party hosts by the Ranche","CVE":"CVE-2026-88811","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"88811","Ordinal":"1","NoteData":"Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,","Type":"Description","Title":"Rancher credentials disclosed to third-party hosts by the Ranche"}]}}}