CVE-2026-88805

Published: Sep 28, 2026Modified: Sep 29, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: meissner@suse.de (Secondary)

Description

Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.15.2.

Related CWEs

CWE-613

Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (1)

https://github.com/rancher/rancher/security/advisories/GHSA-6vpq-mf48-9794

Source: meissner@suse.de

Timeline

No history available yet.