PT-2025-9094 · Rancher · Rancher

Pietro Dellamore · Published 2025-02-27 · Updated 2025-04-11 · CVE-2025-23387

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Rancher versions prior to v2.8.13 Rancher versions prior to v2.9.7 Rancher versions prior to v2.10.3

Description A vulnerability has been identified in Rancher where an unauthenticated user can list and delete CLI authentication tokens, preventing users from logging in via the CLI. This issue affects SAML-based authentication providers and occurs because the login flow from the CLI polls the /v3-public/authTokens/<token name> endpoint. The token is encrypted and cannot be used to impersonate a real user if intercepted. Rancher deployments using only the local authentication provider or non-SAML-based authentication providers are not impacted.

Recommendations For versions prior to v2.8.13, upgrade to version v2.8.13 or later. For versions prior to v2.9.7, upgrade to version v2.9.7 or later. For versions prior to v2.10.3, upgrade to version v2.10.3 or later. As a temporary workaround, users can refrain from using the Rancher CLI to log in.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-23387

GHSA-5QMP-9X47-92Q8

GO-2025-3489

OPENSUSE-SU-2025:14889-1

Affected Products

Rancher

References · 54

• https://osv.dev/vulnerability/CVE-2025-23387 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3489 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23387 · Security Note
• https://osv.dev/vulnerability/GHSA-5qmp-9x47-92q8 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14889-1 · Vendor Advisory
• https://github.com/rancher/rancher · Note
• https://github.com/rancher/rancher/pull/49000 · Note
• https://github.com/rancher/rancher/pull/48998 · Note
• https://github.com/rancher/rancher/releases/tag/v2.10.3 · Note
• https://github.com/rancher/rancher/commit/bedd911b9b321436faa2d9e20a161f6ac396aa74 · Note
• https://github.com/rancher/rancher/commit/ceeedb1aa67c319f4873615f19c3f56a66f39706 · Note
• https://github.com/rancher/rancher/commit/2481630c4a5a75d81eb69d10d7558ea833395a1e · Note
• https://github.com/rancher/rancher/pull/48999 · Note
• https://github.com/rancher/rancher/commit/dfa034d05a55b5e57990a1f700176dcd8e963dbc · Note
• https://github.com/rancher/rancher/pull/48616 · Note