Rancher
- Software type
- Orchestration platform
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/14/2026, Rancher recorded 19 security vulnerabilities in the last 90 days, of which 14 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Rancher and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-23391Rancher: Restricted Administrator can change Administrator's passwordsCVE-2025-23389Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First LoginCVE-2025-23388Unauthenticated stack overflow in /v3-public/authproviders APICVE-2025-23387Rancher's SAML-based login via CLI can be denied by unauthenticated usersCVE-2024-52282Rancher Helm Applications may have sensitive values leaked| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-23391Rancher: Restricted Administrator can change Administrator's passwords | Exploitation statusNot exploited | FixYes |
| SeverityCritical |
CVE-2025-23389Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login | Exploitation statusNot exploited | FixYes | Published04/11/2025 | SeverityHigh |
|---|
CVE-2025-23388Unauthenticated stack overflow in /v3-public/authproviders API | Exploitation statusNot exploited | FixYes | Published04/11/2025 | SeverityHigh |
|---|
CVE-2025-23387Rancher's SAML-based login via CLI can be denied by unauthenticated users | Exploitation statusNot exploited | FixYes | Published04/11/2025 | SeverityMedium |
|---|
CVE-2024-52282Rancher Helm Applications may have sensitive values leaked | Exploitation statusNot exploited | FixYes | Published04/11/2025 | SeverityMedium |
|---|
CVE-2024-52280Users can issue watch commands for arbitrary resources | Exploitation statusNot exploited | FixYes | Published04/11/2025 | SeverityHigh |
|---|
CVE-2022-45157Exposure of vSphere's CPI and CSI credentials in Rancher | Exploitation statusNot exploited | FixYes | Published11/13/2024 | SeverityHigh |
|---|
CVE-2024-22032Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec | Exploitation statusNot exploited | FixYes | Published10/16/2024 | SeverityHigh |
|---|
CVE-2024-22030Rancher agents can be hijacked by taking over the Rancher Server URL | Exploitation statusNot exploited | FixYes | Published10/16/2024 | SeverityHigh |
|---|
CVE-2023-32196SUSE Rancher: Improper RoleTemplate checks can enable privilege escalation | Exploitation statusNot exploited | FixYes | Published10/16/2024 | SeverityHigh |
|---|
CVE-2023-32194Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core' | Exploitation statusNot exploited | FixYes | Published10/16/2024 | SeverityHigh |
|---|
CVE-2023-22650Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider | Exploitation statusNot exploited | FixYes | Published10/16/2024 | SeverityHigh |
|---|
CVE-2023-22649Rancher 'Audit Log' leaks sensitive information | Exploitation statusNot exploited | FixYes | Published10/16/2024 | SeverityHigh |
|---|
CVE-2023-22648CVE-2023-22648 | Exploitation statusNot confirmed | FixYes | Published06/01/2023 | SeverityHigh |
|---|
CVE-2023-22647CVE-2023-22647 | Exploitation statusNot exploited | FixYes | Published06/01/2023 | SeverityCritical |
|---|
CVE-2022-43760CVE-2022-43760 | Exploitation statusNot exploited | FixYes | Published06/01/2023 | SeverityHigh |
|---|
CVE-2023-22651CVE-2023-22651 | Exploitation statusNot exploited | FixYes | Published05/04/2023 | SeverityCritical |
|---|
CVE-2022-43759Rancher: Privilege escalation via promoted roles | Exploitation statusNot exploited | FixYes | Published02/07/2023 | SeverityHigh |
|---|
CVE-2022-43758Rancher: Command injection in Git package | Exploitation statusNot exploited | FixYes | Published02/07/2023 | SeverityHigh |
|---|
CVE-2022-43757Rancher: Exposure of sensitive fields | Exploitation statusNot exploited | FixYes | Published02/07/2023 | SeverityCritical |
|---|
CVE-2022-43756Rancher/Wrangler: Denial of service when processing Git credentials | Exploitation statusNot exploited | FixNo | Published02/07/2023 | SeverityMedium |
|---|
CVE-2022-43755Rancher: Non-random authentication token | Exploitation statusNot exploited | FixYes | Published02/07/2023 | SeverityHigh |
|---|
CVE-2022-31249[RANCHER] OS command injection in Rancher and Fleet | Exploitation statusNot exploited | FixNo | Published02/07/2023 | SeverityHigh |
|---|
CVE-2022-21953Authenticated user can gain unauthorized shell pod and kubectl access in the local cluster | Exploitation statusNot exploited | FixYes | Published02/07/2023 | SeverityHigh |
|---|
CVE-2022-31247Rancher: Downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB) | Exploitation statusNot confirmed | FixYes | Published09/07/2022 | SeverityCritical |
|---|
CVE-2021-36783Rancher: Failure to properly sanitize credentials in cluster template answers | Exploitation statusNot confirmed | FixYes | Published09/07/2022 | SeverityCritical |
|---|
CVE-2021-36782Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object | Exploitation statusNot confirmed | FixYes | Published09/07/2022 | SeverityCritical |
|---|
CVE-2022-21951Rancher: Weave CNI password is not set if RKE template is used with CNI value overridden | Exploitation statusNot confirmed | FixYes | Published05/25/2022 | SeverityMedium |
|---|
CVE-2021-4200Write access to the Catalog for any user when restricted-admin role is enabled | Exploitation statusNot confirmed | FixYes | Published05/02/2022 | SeverityMedium |
|---|
CVE-2021-36784Privilege escalation for users with create/update permissions in Global Roles | Exploitation statusNot confirmed | FixYes | Published05/02/2022 | SeverityHigh |
|---|
CVE-2021-36778Exposure of repository credentials to external third-party sources | Exploitation statusNot confirmed | FixYes | Published05/02/2022 | SeverityHigh |
|---|
CVE-2022-21947rancher desktop: Dashboard API is network accessible | Exploitation statusNot confirmed | FixYes | Published04/01/2022 | SeverityHigh |
|---|
CVE-2021-36776Steve API proxy impersonation | Exploitation statusNot confirmed | FixYes | Published04/01/2022 | SeverityHigh |
|---|
CVE-2021-36775Deleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings | Exploitation statusNot confirmed | FixYes | Published04/01/2022 | SeverityHigh |
|---|
CVE-2021-32001K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token | Exploitation statusNot confirmed | FixNo | Published07/28/2021 | SeverityMedium |
|---|
CVE-2021-25313Rancher: XSS on /v3/cluster/ | Exploitation statusNot confirmed | FixYes | Published03/05/2021 | SeverityHigh |
|---|
86 Results | Page 2 of 2