← Database

CVE-2026-41053

HIGH CVSS: 8.8 Published: 2026-06-30 Modified: 2026-07-02

Description

Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.

Affected Platforms

Suse Rancher

Weakness Type

CWE-303

References