---
id: "CVE-2026-104623"
kind: "vulnerability"
aliases: ["CVE-2026-104623"]
title: "Rancher Manager: authenticated users can reach management cluster shell"
severity: "medium"
cvss: 6.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["rancher", "kubernetes", "infrastructure", "poc-public", "self-hosted"]
not_affected_if: ["managed-hosting"]
published_at: "2026-10-30T17:17:12+00:00"
first_seen_at: "2026-10-30T17:31:39+00:00"
updated_at: "2026-10-30T18:55:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104623", "first_seen_at": "2026-10-30T17:31:39+00:00"}, {"source": "github-poc", "url": "https://github.com/googlesky/CVE-2026-104623", "first_seen_at": "2026-10-30T18:55:33+00:00"}]
---

# Rancher Manager: authenticated users can reach management cluster shell

SUSE Rancher Manager has an authorization gap in its local management cluster shell feature, because the access check was not applied to every API route that reaches it. An authenticated user can use an alternate request form to bypass the check and run a pod on the management cluster.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Rancher Manager version against the affected ranges in the sources (2.11.0 to 2.11.19, 2.12.0 to 2.12.15, 2.13.0 to 2.13.11, 2.14.0 to 2.14.7, 2.15.0 to 2.15.3, and possibly older).
- Check whether the Rancher Manager version in use is one of the listed affected releases.

## Timeline

- 2026-10-30T17:31:39+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-104623
- 2026-10-30T18:55:33+00:00 github-poc https://github.com/googlesky/CVE-2026-104623

## Documents

- [poc] googlesky/CVE-2026-104623 https://github.com/googlesky/CVE-2026-104623

## From the sources

A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that was introduced to protect this feature was not applied to every API route that can reach it, so an alternative request form reached the shell handler without the access check being evaluated. This could allow any authenticated users to run a pod on the management cluster.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_