CVE-2026-88805

Session Not Revoked Server-Side on Logout in Rancher PUBLISHED

Description (CNA)

Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.15.2.

Affected (CNA)

Vendor / product	Versions
SUSE / Rancher	affected 2.15.0 before 2.15.2

CWE

CWE-613

References

https://github.com/rancher/rancher/security/advisories/GHSA-6vpq-mf48-9794

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.