CVE-2026-41052 — Rancher Privilege Escalation from Project Owner to Host

CVE-2026-41052

Rancher Privilege Escalation from Project Owner to Host PUBLISHED

Description (CNA)

Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10.

Affected (CNA)

Vendor / product	Versions
SUSE / Rancher	affected 2.12.0 before 2.12.10; affected 2.13.0 before 2.13.6; affected 2.14.0 before 2.14.2

CWE

CWE-305

References

https://github.com/rancher/rancher/security/advisories/GHSA-vx8h-4prv-g744

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.