{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/rancher-2.12.0---2.12.14/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Rancher (\u003c 2.11.19)","Rancher (2.12.0 - 2.12.14)","Rancher (2.13.0 - 2.13.10)","Rancher (2.14.0 - 2.14.6)","Rancher (2.15.0 - 2.15.2)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","ssrf","cloud"],"_cs_type":"advisory","_cs_vendors":["SUSE"],"content_html":"\u003cp\u003eA security vulnerability exists in SUSE Rancher, specifically within its meta proxy component, which allows for an allowlist bypass. This vulnerability can lead to server-side request forgery (SSRF), potentially enabling attackers to make unauthorized requests to internal resources that should be restricted. Administrators should apply the provided updates immediately.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate Rancher instances to the following patched versions to address the meta proxy allowlist bypass:\u003c/li\u003e\n\u003cli\u003e2.11.19\u003c/li\u003e\n\u003cli\u003e2.12.15\u003c/li\u003e\n\u003cli\u003e2.13.11\u003c/li\u003e\n\u003cli\u003e2.14.7\u003c/li\u003e\n\u003cli\u003e2.15.3\u003c/li\u003e\n\u003cli\u003eReview Rancher logs for anomalous outbound HTTP requests originating from the cluster management API or proxy components.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-02T21:21:52Z","date_published":"2026-11-02T21:21:52Z","id":"https://feed.craftedsignal.io/briefs/2026-11-suse-rancher-ssrf/","summary":"SUSE Rancher is vulnerable to a meta proxy allowlist bypass that results in server-side request forgery (SSRF), allowing potential unauthorized internal network requests.","title":"SUSE Rancher Meta Proxy Allowlist Bypass SSRF","url":"https://feed.craftedsignal.io/briefs/2026-11-suse-rancher-ssrf/"}],"language":"en","title":"CraftedSignal Threat Feed - Rancher (2.12.0 - 2.12.14)","version":"https://jsonfeed.org/version/1.1"}