← Zurück zur CVE-Suche

CVE-2026-44947

Rancher

Beschreibung

A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those permissions from a RoleTemplate.

CVSS 6.9EPSS 0.22899999999999998%Risiko 0.7
Quelle öffnen
Veröffentlicht
2026-06-30 15:16:56
Betroffene Versionen
<=2.13.7, <=2.14.3
Typ
Kritische Software
Vektor
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X