Detections
Analytics

CVE-2026-41052

critical

Description

Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10.

References

https://github.com/rancher/rancher/security/advisories/GHSA-vx8h-4prv-g744

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40130

Details

Source: Mitre, NVD

Published: 2026-06-29

Updated: 2026-07-02

Named Vulnerability: GO-2026-5876Named Vulnerability: GHSA-vx8h-4prv-g744

Risk Information

CVSS v2

Base Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

CVSS v4

Base Score: 9.4

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Severity: Critical

EPSS

EPSS: 0.00423