CVE-2026-44946 — SAML Authentication Replay in Rancher

CVE-2026-44946

SAML Authentication Replay in Rancher PUBLISHED

Description (CNA)

A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,

Affected (CNA)

Vendor / product	Versions
SUSE / Rancher	affected 2.14.0 before 2.14.3; affected 2.13.0 before 2.13.7; affected 2.12.0 before 2.12.11; affected 2.11.0 before 2.11.15

CWE

CWE-294

References

https://github.com/rancher/rancher/security/advisories/GHSA-c5jm-xcmq-9j95

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.