CVE-2026-44945: A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global ro

criticalCVSS 9.1CVE-2026-44945

A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it manages. This issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: critical — CVSS 9.1
Published: 2026-08-05
Last updated: 2026-08-05
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-44945

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-449450.74% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 51% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-44945	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[UPDATE] [hoch] Rancher: Mehrere Schwachstellencert-bund

Recent advisories for A privilege escalation

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownCVE-2026-15587: Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Go…nvd · 2026-08-05
highCVE-2026-12410: Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Wi…nvd · 2026-08-05
high[UPDATE] [high] Linux Kernel: Vulnerability allows privilege escalationcert-bund · 2026-08-05
medium[NEW] [medium] Linux Kernel: Vulnerability allows privilege escalationcert-bund · 2026-08-05
medium[NEW] [medium] Red Hat Enterprise Linux (acl): Multiple vulnerabilities allow privilege escalation and file ma…cert-bund · 2026-08-05
highCVE-2026-8761: The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and…nvd · 2026-08-05