Rancher (2.13.0 - 2.13.10) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/rancher-2.13.0---2.13.10/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 21:21:52 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSUSE Rancher Meta Proxy Allowlist Bypass SSRFhttps://feed.craftedsignal.io/briefs/2026-11-suse-rancher-ssrf/Mon, 02 Nov 2026 21:21:52 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-suse-rancher-ssrf/SUSE Rancher is vulnerable to a meta proxy allowlist bypass that results in server-side request forgery (SSRF), allowing potential unauthorized internal network requests.A security vulnerability exists in SUSE Rancher, specifically within its meta proxy component, which allows for an allowlist bypass. This vulnerability can lead to server-side request forgery (SSRF), potentially enabling attackers to make unauthorized requests to internal resources that should be restricted. Administrators should apply the provided updates immediately.

Recommendation

  • Update Rancher instances to the following patched versions to address the meta proxy allowlist bypass:
  • 2.11.19
  • 2.12.15
  • 2.13.11
  • 2.14.7
  • 2.15.3
  • Review Rancher logs for anomalous outbound HTTP requests originating from the cluster management API or proxy components.
]]>highadvisoryvulnerabilityssrfcloud