CVE-2026-55997

EUVD-2026-53259
Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in plaintext with no expiration, so a malicious user could obtain one either through the Rancher API, etcd, stored automation, or direct file access on a node, and could use it at any time to register a rogue node into the cluster.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
suseCNA
8.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
rancherrancher
2.14.0 ≤
𝑥
< 2.14.4
CNA
rancherrancher
2.13.0 ≤
𝑥
< 2.13.8
CNA
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-55997
https://github.com/rancher/rancher/security/advisories/GHSA-7r53-jvhg-9jq4