{"id":"CVE-2026-104623","kind":"vulnerability","aliases":["CVE-2026-104623"],"related":[],"title":"Rancher Manager: authenticated users can reach management cluster shell","description":"A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that was introduced to protect this feature was not applied to every API route that can reach it, so an alternative request form reached the shell handler without the access check being evaluated. This could allow any authenticated users to run a pod on the management cluster.","summary":"SUSE Rancher Manager has an authorization gap in its local management cluster shell feature, because the access check was not applied to every API route that reaches it. An authenticated user can use an alternate request form to bypass the check and run a pod on the management cluster.","severity":"medium","cvss":6.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["rancher","kubernetes","infrastructure","poc-public","self-hosted"],"not_affected_if":["managed-hosting"],"how_to_check":"- Check the installed Rancher Manager version against the affected ranges in the sources (2.11.0 to 2.11.19, 2.12.0 to 2.12.15, 2.13.0 to 2.13.11, 2.14.0 to 2.14.7, 2.15.0 to 2.15.3, and possibly older).\n- Check whether the Rancher Manager version in use is one of the listed affected releases.","fix":null,"status":"open","published_at":"2026-10-30T17:17:12+00:00","first_seen_at":"2026-10-30T17:31:39+00:00","triaged_at":"2026-10-30T17:32:10+00:00","updated_at":"2026-10-30T18:55:33+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-30T17:32:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Rancher Manager: authenticated users can reach management cluster shell","impact":"high","summary":"SUSE Rancher Manager has an authorization gap in its local management cluster shell feature, because the access check was not applied to every API route that reaches it. An authenticated user can use an alternate request form to bypass the check and run a pod on the management cluster.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["rancher","kubernetes","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"any authenticated user runs a pod on the management cluster","analyst_note":"Sources do not state a fixed version or mitigation; check the SUSE Rancher security advisory for the fixed releases and workarounds.","how_to_check":"- Check the installed Rancher Manager version against the affected ranges in the sources (2.11.0 to 2.11.19, 2.12.0 to 2.12.15, 2.13.0 to 2.13.11, 2.14.0 to 2.14.7, 2.15.0 to 2.15.3, and possibly older).\n- Check whether the Rancher Manager version in use is one of the listed affected releases.","plain_action":"","needs_analyst":true,"not_affected_if":["managed-hosting"],"who_is_affected":"Teams running SUSE Rancher Manager in the affected version ranges, where any authenticated user could reach the local management cluster shell. Installations outside the listed ranges are not named in the sources, and the sources do not say whether specific configurations change exposure.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000718,"input_tokens":4223,"output_tokens":591,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-104623':12A,15A '-2026':11A,14A '2.11.0':109C '2.11.19':112C '2.12.0':105C '2.12.15':108C '2.13.0':101C '2.13.11':104C '2.14.0':97C '2.14.7':100C '2.15.0':93C '2.15.3':96C 'access':41B,149C 'allow':155C 'altern':59B,140C 'api':48B,132C 'appli':45B,129C 'authent':3A,54B,157C 'author':30B,80C,118C 'bypass':63B 'check':42B,65B,119C,150C 'cluster':8A,36B,73B,86C,166C 'could':154C 'cve':10A,13A 'evalu':152C 'everi':47B,131C 'exist':77C 'featur':38B,88C,126C 'form':61B,142C 'gap':31B 'handl':81C 'handler':146C 'host':24B 'infrastructur':18B 'introduc':122C 'kubernet':17B 'local':34B,84C 'manag':2A,7A,27B,35B,72B,85C,92C,165C 'older':115C 'poc':20B 'poc-publ':19B 'pod':69B,162C 'possibl':114C 'protect':124C 'public':21B 'rancher':1A,16B,26B,91C 'reach':6A,51B,136C,143C 'request':60B,141C 'rout':49B,133C 'run':67B,160C 'secur':75C 'self':23B 'self-host':22B 'shell':9A,37B,87C,145C 'suse':25B,90C 'use':57B 'user':4A,55B,158C 'version':116C 'vulner':76C 'without':147C","nicknames":[],"mitigations":[],"who_affected":"Teams running SUSE Rancher Manager in the affected version ranges, where any authenticated user could reach the local management cluster shell. Installations outside the listed ranges are not named in the sources, and the sources do not say whether specific configurations change exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T17:17:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss_by":"meissner@suse.de","poc_count":1,"sources":[{"source":"nvd","external_id":"CVE-2026-104623","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104623","severity":null,"published_at":"2026-10-30T17:17:12+00:00","modified_at":"2026-10-30T17:17:12+00:00","first_seen_at":"2026-10-30T17:31:39+00:00","fetched_at":"2026-10-30T17:31:39+00:00","note":null},{"source":"github-poc","external_id":"googlesky/CVE-2026-104623","url":"https://github.com/googlesky/CVE-2026-104623","severity":null,"published_at":"2026-10-30T18:45:20+00:00","modified_at":null,"first_seen_at":"2026-10-30T18:55:33+00:00","fetched_at":"2026-10-30T18:55:33+00:00","note":null}],"documents":[{"id":25328,"url":"https://github.com/googlesky/CVE-2026-104623","title":"googlesky/CVE-2026-104623","kind":"poc","source":"github","publisher":null,"text":"PoC and Docker lab for CVE-2026-104623 — SUSE Rancher Manager local-cluster-shell authorization bypass: any authenticated user spawns a shell pod on the management cluster via alternate request forms that dodge the authorization gate. Validated end-to-end on rancher 2.15.2 (vulnerable) vs 2.15.3 (patched).\n\nstars 0","published_at":"2026-10-30T18:45:20+00:00","relation":"poc","confidence":null,"note":"0 stars"}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}