What is CVE-2026-88810 in Rancher Manager?
CVE-2026-88810 is a critical privilege escalation vulnerability discovered in Rancher Manager's role-based access control revisando vulnerabilidades similares.
The flaw originates because the inheritedNamespacedRules field of a GlobalRole propagates permissions into named namespaces of every downstream cluster managed by the instance. However, this field was not subjected to the necessary privilege-escalation validation applied to other permission-carrying fields.
Who is affected by this privilege escalation flaw?
This security issue specifically affects SUSE Rancher 2.15.2, alongside SUSE Rancher Webhook versions from 0.11.0 up to 0.11.4, and versions from 0.12.0 up to 0.12.1.
As a consequence of this vulnerability, a non-administrative user could be granted permissions in downstream clusters that exceed the permissions the user already holds, via a global role binding analizando otras fallas de control.
How do I protect my systems?
To protect your infrastructure against CVE-2026-88810, administrators should follow precise remediation steps, similar to practices used when actualizando librerías críticas de Rust.
Review all current GlobalRole bindings and apply the official security patches provided in the advisory [[reference:3]].