GO-2025-4073

vendorUSosv

Rancher user retains access to clusters despite Global Role removal in github.com/rancher/rancher

view advisory published 2025-10-30Licence: per source

Rancher user retains access to clusters despite Global Role removal in github.com/rancher/rancher

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-32199US——
A vulnerability has been identified within Rancher Manager, where after removing a custom GlobalRole that gives administrative access or the corresponding binding, the user still…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan