CVE-2026-88811

Upstream information

CVE-2026-88811 at MITRE

Description

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,

---

Upstream Security Advisories:

• https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2

Other Security Trackers

• EUVD-2026-115330

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having critical severity.

CVSS v3 Scores

CVSS detail	CNA (SUSE)
Base Score	9.1
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality Impact	High
Integrity Impact	High
Availability Impact	None
CVSSv3 Version	3.1

SUSE Bugzilla entry: 1281159 [NEW]

SUSE Security Advisories:

• GHSA-x82x-2qj6-5rm2, published Thu Oct 29 21:09:47 CET 2026

---

SUSE Timeline for this CVE

CVE page created: Fri Oct 30 12:53:30 2026
CVE page last modified: Tue Nov 3 12:51:22 2026