PT-2026-37355 · Suse · Rancher

Published 2026-05-06 · Updated 2026-05-13 · CVE-2026-25705

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rancher versions prior to 2.11.13 Rancher versions prior to 2.12.9 Rancher versions prior to 2.13.5 Rancher versions prior to 2.14.1

Description A path traversal issue exists in the UI plugin mechanism. Malicious code can be injected through the compressedEndpoint field inside a UIPlugin deployment. This allows a malicious UI extension to overwrite binaries or configurations, tamper with cluster state by writing to /var/lib/rancher/, or write to the host node filesystem if hostPath volumes are mounted. By default, this action requires administrator permissions or specifically granted user permissions.

Recommendations Update to version 2.11.13. Update to version 2.12.9. Update to version 2.13.5. Update to version 2.14.1.

Fix

Weakness Enumeration

CWE-35

Related Identifiers

CVE-2026-25705

GHSA-5V3H-X4WF-5C35

Affected Products

Rancher

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-25705 · Security Note
• https://osv.dev/vulnerability/GHSA-5v3h-x4wf-5c35 · Vendor Advisory
• https://github.com/rancher/rancher/security/advisories/GHSA-5v3h-x4wf-5c35 · Note
• https://github.com/rancher/rancher · Note
• https://t.me/CVEtracker/53627 · Telegram Post
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-25705 · Note
• https://twitter.com/EnigmaGlobalSW/status/2051901944915009816 · Twitter Post