VulnSocial

CVE-2026-44945Patch

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it manages. This issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-441CWE-497

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-08-11); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-08-06: 1Mentions · 2026-08-11: 2Mentions · 2026-08-19: 1Patch / Workaround · 2026-08-06: 1Patch / Workaround · 2026-08-19: 1Technical Details · 2026-08-11: 2Technical Details · 2026-08-19: 108-0608-1108-19
Signal classification2 categories
Patch
250.0%
Disclosure
250.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-08-061
Patch1
2026-08-112
Disclosure2
2026-08-191
Patch1
Full discourse4 posts
  • Netlas.io@Netlas_io
    Disclosure

    CVE-2026-44945: A privilege escalation vulnerability in Rancher, 9.1 rating ‍🔥 An authenticated Rancher low-privileged user can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it manages. 👉 https://nt.ls/FGN75

    Post summary

    A new privilege escalation vulnerability (CVE‑2026‑44945) in Rancher has been disclosed, assigning it a 9.1 severity score, but no PoC, exploit, active exploitation reports, or patch information is presented.

    02052798
    7.7K followersView on X
  • Sami Laiho@samilaiho
    Patch

    Critical vulnerability in SUSE Rancher URL: https://nvd.nist.gov/vuln/detail/CVE-2026-44945 Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1

    Post summary

    CVE-2026-44945, a critical flaw in SUSE Rancher, has been disclosed with an official patch available, though no exploit details or active usage are reported.

    010101.0K
    30.6K followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    Disclosure

    CVE-2026-44945 lets a default Rancher user gain full admin control via cross-cluster impersonation. Privilege escalation rated CVSS 9.1. #Rancher #Kubernetes #CVE #PrivilegeEscalation #CyberSecurity http://securityonline.info/rancher-privilege-escalation/

    Post summary

    The post announces a high‑severity privilege escalation flaw in Rancher that lets a default user gain admin rights via cross‑cluster impersonation; no PoC, exploit, active use, or patch details are provided.

    00010414
    12.6K followersView on X
  • iototsecnews@iototsecnews
    Patch

    Rancher の深刻な脆弱性 CVE-2026-44945 が FIX：全クラスターの Admin 権限奪取に至る恐れ https://iototsecnews.jp/2026/08/11/critical-rancher-flaw-lets-authenticated-users-gain-full-admin-access-to-all-managed-clusters/ SUSE Rancher における権限の検証には、処理の受け渡し時に確認手順がねじれる問題が存在します。操作対象の環境ごとに適切な権限を確認しない仕組みの隙を突くことで、限定された権限しか持たないアカウントからでもシステム全体の制御権限へ拡大してしまいます。この問題による影響として、管理下の全構成への不正アクセス／各種暗号鍵や接続パスワードといった機密情報の漏洩／永続的な管理権限の奪取などが懸念されます。運用環境での対応策として、安全な修正版への速やかなアップデートの適用／下流環境を新規に登録できる権限の確認と制限／不要な登録権限の早期剥奪が求められます。 #CVE202644945 #Rancher #SUSE #Vulnerability

    Post summary

    The post reports a severe privilege‑escalation flaw in Rancher (CVE‑2026‑44945) and urges users to apply vendor patches and limit registration permissions, without evidence of a PoC, exploit, or active attacks.

    00000116
    507 followersView on X

Explore more

Back to dashboard