Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-04 | 1 | Disclosure1 |
| 2026-06-30 | 1 | Patch1 |
| 2026-07-01 | 1 | Disclosure1 |
| 2026-07-02 | 1 | Disclosure1 |
| 2026-07-24 | 1 | General1 |
Rancher privilege escalation from project owner to host URL: https://nvd.nist.gov/vuln/detail/CVE-2026-41052 Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.4
Post summary
A new critical Rancher privilege escalation vulnerability (CVE-2026-41052) has been disclosed with a CVSSv3.1 score of 9.4, and an official vendor fix is available.
CVE-2026-41052: Rancher Privilege Escalation Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04qH7qZ0
Post summary
The provided snippet references a Rancher privilege escalation CVE but offers no concrete details on PoC, exploitation, patches, or technical depth.
Rancher disclosed 3 critical CVEs on July 1 — including CVE-2026-41052 (CVSS 9.4) enabling full host takeover from a low-privileged project role, plus Fleet secret disclosure and command injection. Patch to Rancher 2.12.10, 2.13.6, or 2.14.2. #DevSecOps #CyberSecurity https://github.com/advisories?query=severity%3Acritical
Post summary
The text announces the disclosure of three critical CVEs affecting Rancher, provides technical details of the vulnerabilities, and lists specific patch versions to mitigate them.
🔴 Rancher Manager - Privilege Escalation via Pod Security Admission (PSA) Label Modification (#CVE-2026-41052) - Critical -DC-Jul2026-796 https://dailycve.com/rancher-manager-privilege-escalation-via-pod-security-admission-psa-label-modification-cve-2026-41052-critical-dc-jul2026-796/
Post summary
The announcement identifies CVE-2026-41052 as a privilege escalation flaw in Rancher Manager that allows label modification in Pod Security Admission, but it provides no PoC, exploit code, or patch information.
Rancher Kubernetesプラットフォームに3件の重大な脆弱性(CVE-2026-44939,CVE-2026-41052,CVE-2026-41053) https://rocket-boys.co.jp/security-measures-lab/rancher-platform-flaws-cve-2026-44939-cve-2026-41052/ #セキュリティ対策Lab #security #securitynews
Post summary
The post alerts to three critical Rancher Kubernetes platform vulnerabilities (CVE‑2026‑44939, CVE‑2026‑41052, CVE‑2026‑41053) but offers no technical or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | suse | rancher | - | - | - |