[UPDATE] [high] Rancher: Multiple vulnerabilities

highCVE-2026-44945 CVE-2026-55996 CVE-2026-55997 CVE-2026-55998 CVE-2026-59675

An attacker can exploit multiple vulnerabilities in Rancher to escalate privileges, to perform a denial of service attack, and to disclose information.

CSIRTS triage

vendor: Rancher product: Rancher Privilege escalation Denial of service Information disclosure

What: Multiple vulnerabilities in Rancher enable privilege escalation, denial of service, and information disclosure.
Who is affected: All Rancher deployments including container orchestration environments are affected.
Urgency: High severity; Rancher is a critical infrastructure component; privilege escalation could lead to cluster-wide compromise.
Action: Update Rancher to the latest patched version and audit role-based access control (RBAC) configurations.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Rancher

Get an email when a new Rancher advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-08-06
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2600

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-449450.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 23% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-559960.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-559970.08% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 0% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-559980.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 11% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-596750.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-44945	coverage & exploitation status	NVD · CVE.org
CVE-2026-55996	coverage & exploitation status	NVD · CVE.org
CVE-2026-55997	coverage & exploitation status	NVD · CVE.org
CVE-2026-55998	coverage & exploitation status	NVD · CVE.org
CVE-2026-59675	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Rancher

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

criticalCVE-2026-44945: A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/re…nvd · 2026-08-05
highCVE-2026-55997: Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downs…nvd · 2026-08-05
mediumCVE-2026-55996: A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both th…nvd · 2026-08-05
highCVE-2026-44937: Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fle…nvd · 2026-07-06
mediumCVE-2026-44936: Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Ranc…nvd · 2026-07-06
unknownCVE-2026-44934: A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 …nvd · 2026-07-06