CVE-2026-41053

Name: CVE-2026-41053 — Vulnerability Record
Brand: Quanteta Data Lab
SKU: CVE-2026-41053

HIGH

CVSS v3.1: 8.8

NetworkNo user interactionVendor advisory ref

Source data as of: 2026-07-01 05:03:33 UTC

At a glance

Severity: HIGH
CVSS: 8.8 v3.1 · NVD
EPSS: EPSS not provided by FIRST.org for this CVE
CISA KEV: No
Attack conditions (CVSS vector): NetworkNo user interaction · Source: NVD Vector
Published: 2026-06-30 · Modified: 2026-06-30
References: Jump to references (1)

CVSS / EPSS / KEV

CVSS v3.1 8.8 / 10 HIGH Source: NVD

EPSS — EPSS not provided by FIRST.org for this CVE Source: FIRST.org

CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2.

Record details

CVE ID: CVE-2026-41053
CVSS (v3.1): 8.8 (HIGH)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability subscore: 2.8
Impact subscore: 5.9
CISA KEV: No
Weakness (CWE): CWE-303
Affected configurations (CPE): 0
Published: 2026-06-30
Modified: 2026-06-30
Status: Undergoing Analysis

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.

Vendor advisory https://github.com/rancher/rancher/security/advisories/GHSA-4j6x-2764-m8gh

← Back to all records