CVSS 3.1
4.8 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2025-67601
Medium (4.8) in suse rancher. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in github.com/rancher/rancher 0.0.0-20260129092249-bb0625fd1896, 2.10.11, 2.11.10.
A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the –cacert flag results in the CLI attempting to fetch CA certificates stored in Rancher’s setting cacerts.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
- CWE
- CWE-295
- Published
- Modified
- Record from
- the NVD, synced
Affected
- suse:rancher
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mc24-7m59-4q5p | Go | github.com/rancher/rancher | <0.0.0-20260129092249-bb0625fd1896 | 0.0.0-20260129092249-bb0625fd1896 |
| GHSA-mc24-7m59-4q5p | Go | github.com/rancher/rancher | >=2.13.0 <2.13.2 | 2.13.2 |
| GHSA-mc24-7m59-4q5p | Go | github.com/rancher/rancher | >=2.12.0 <2.12.6 | 2.12.6 |
| GHSA-mc24-7m59-4q5p | Go | github.com/rancher/rancher | >=2.11.0 <2.11.10 | 2.11.10 |
| GHSA-mc24-7m59-4q5p | Go | github.com/rancher/rancher | >=2.10.0 <2.10.11 | 2.10.11 |
| GO-2026-4393 | Go | github.com/rancher/rancher | all versions | no fix published |