All vulnerabilities

Servers and applications

CVE-2024-58267

Rancher CLI SAML authentication is vulnerable to phishing attacks

Severity
High 8.0
Published
25 Sept 2025
Last changed
25 Sept 2025
Added to UpHeron
3 Nov 2026
Fixed in
2.9.12, 2.10.10, 2.11.6, 2.12.2
Also known as
GHSA-v3vj-5868-2ch2
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
RancherServers and applications · github:rancher/rancher
  • From 2.9.0 before 2.9.12
  • From 2.10.0 before 2.10.10
  • From 2.11.0 before 2.11.6
  • From 2.12.0 before 2.12.2

References