Skip to content
CVE Tracker
Back

CVE-2026-88810

Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules

High7.2
Published
Updated
Reserved
Assigned by
suse

Description

A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the Rancher instance, but it was not subject to the privilege-escalation validation applied to the other permission-carrying fields of a GlobalRole. As a result, a non-administrative user could be granted, through a global role  binding, permissions in downstream clusters that exceed the permissions that user already holds. This affected SUSE Rancher 2.15.2 only, and SUSE Rancher Webhook 0.11.0 up to 0.11.4, and 0.12.0 up to 0.12.1.

Scores

CVSS scores of CVE-2026-88810, by who scored it
Scored byCVSSScoreVector
suseCNA (assigner)3.1High7.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Awaiting Analysis3.1High7.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
Not scored
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.2.

Weakness

Affected products

  • SUSE · Rancher

    • affected 2.15.2 – < 2.15.3

  • SUSE · Rancher

    • affected 0.11.0 – < 0.11.4
    • affected 0.12.0 – < 0.12.1

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .