Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

Rancher meta proxy allowlist bypass leads to server-side request forgery (SUSE AV26-1113)

Original title: SUSE Linux security advisory (AV26-1113)

Canadian Centre for Cyber Security ()1 min read
Read at cyber.gc.ca
AI summary · x-ai/grok-4.7Summaries by Vani AI

Rancher versions prior to 2.11.19, 2.12.15, 2.13.11, 2.14.7 and 2.15.3 are affected by the vulnerability.

The Canadian Centre for Cyber Security has issued SUSE Linux security advisory AV26-1113 regarding a vulnerability in Rancher. The advisory identifies a meta proxy allowlist bypass that can lead to server-side request forgery. SUSE is affected in all listed prior versions of Rancher. Users and administrators are encouraged to review linked resources and apply available updates.

Key facts
  • Rancher prior to 2.11.19
  • Rancher prior to 2.12.15
  • Rancher prior to 2.13.11
  • Rancher prior to 2.14.7
  • Rancher prior to 2.15.3
Security assessment · AI, from the article
What to do
  1. 1.Upgrade to Rancher 2.11.19 or later
  2. 2.Upgrade to Rancher 2.12.15 or later
  3. 3.Upgrade to Rancher 2.13.11 or later
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
rancherssrf
Vendors
SUSE
Products
Rancher

From the original article

1 min read at cyber.gc.ca

Serial Number: AV26-1113 Date: November 2, 2026 As of November 2, 2026, SUSE is affected by a vulnerability in the following product: Rancher Prior to 2. 11. 19 Prior to 2.

Canadian Centre for Cyber Security

cyber.gc.ca

Read the full article at Canadian Centre for Cyber Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.