en
Rancher is an open-source Kubernetes management platform operated by SUSE. Its core purpose is to help organizations provision, import, configure, secure, monitor, and operate Kubernetes clusters across infrastructure providers. It is used by DevOps and platform teams through self-managed and enterprise-supported deployments.
As of 10/04/2026, Rancher recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Rancher had the most security vulnerabilities in the Rancher ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-55997Long-lived Rancher registration token exposed in plaintext | Exploitation statusNot known exploited | FixYes | Affected productRancher | Published08/05/2026 | SeverityHigh |
CVE-2026-44543Local Path Provisioner: HelperPod Template Injection | Exploitation statusNot known exploited | FixYes | Affected productlocal-path-provisioner | Published05/28/2026 | SeverityHigh |
CVE-2023-32196Rancher's External RoleTemplates can lead to privilege escalation | Exploitation statusNot known exploited | FixYes | Affected productRancher | Published10/16/2024 | SeverityHigh |
CVE-2023-32194Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core' | Exploitation statusNot known exploited | FixYes | Affected productRancher | Published10/16/2024 | SeverityHigh |
CVE-2023-32193Norman API Cross-site Scripting Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productnorman | Published10/16/2024 | SeverityHigh |
CVE-2023-22649Rancher 'Audit Log' leaks sensitive information | Exploitation statusNot known exploited | FixYes | Affected productRancher | Published10/16/2024 | SeverityHigh |
CVE-2021-36776Steve API proxy impersonation | Exploitation statusNot confirmed | FixYes | Affected productRancher | Published04/01/2022 | SeverityHigh |
CVE-2021-36775Deleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings | Exploitation statusNot confirmed | FixYes | Affected productRancher | Published04/01/2022 | SeverityHigh |
CVE-2021-31999Rancher: Privilege escalation vulnerability via malicious Connection header | Exploitation statusNot confirmed | FixYes | Affected productRancher | Published07/15/2021 | SeverityHigh |
CVE-2021-25320Rancher: Cloud credentials can be used through proxy API by users without access | Exploitation statusNot confirmed | FixYes | Affected productRancher | Published07/15/2021 | SeverityCritical |
CVE-2021-25318rancher: API group not properly specified when creating Kubernetes RBAC resources | Exploitation statusNot confirmed | FixYes | Affected productRancher | Published07/15/2021 | SeverityHigh |
