CVE-2026-44949 | SUSE Rancher up to 0.7.9/0.8.6/0.9.5/0.10.6 in-cluster rancher-webhook Service missing authentication (GHSA-h83p-cq95-vph4)

June 30, 2026 Yanac

A vulnerability marked as critical has been reported in SUSE Rancher up to 0.7.9/0.8.6/0.9.5/0.10.6. Affected by this vulnerability is an unknown functionality of the component in-cluster rancher-webhook Service. Performing a manipulation results in missing authentication.

This vulnerability is reported as CVE-2026-44949. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More