← Database

CVE-2024-58260

HIGH CVSS: 7.6 Published: 2025-10-02 Modified: 2026-06-17

Description

A vulnerability has been identified within Rancher Manager where a missing server-side validation on the `.username` field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts.

Affected Platforms

Unknown

Weakness Type

CWE-863

References