CVE-2023-22647

An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the secret being deleted, but their read-level permissions to the secret being preserved. When this operation was followed-up by other specially crafted commands, it could result in the user gaining access to tokens belonging to service accounts in the local cluster. This issue affects Rancher: from >= 2.6.0 before < 2.6.13, from >= 2.7.0 before < 2.7.4.

CVSS 3.1

8.0CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-25)

CWE

CWE-267

Published

2023-06-01

Modified

2026-10-23

Record from

the NVD, synced 2026-10-24

Affected

• suse:rancher

Packages (OSV)

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22647
• https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22647
• https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6

Check your stackJSON