CVE-2026-44945

Summary

A privilege escalation vulnerability allows authenticated users to gain full administrative access, bypassing role restrictions.

Exploitability

Exploitation is relatively straightforward for attackers with basic authentication credentials and requires knowledge of the affected Rancher versions.

Blast radius

If exploited, this can lead to complete control over the Rancher management system and all associated clusters.

Prioritized remediation

Update to Rancher 2.11.16 or later, 2.12.12 or later, 2.13.8 or later, or 2.14.2 or later immediately.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.