All vulnerabilities

Servers and applications

CVE-2025-23391

Restricted Administrator can change Administrator's passwords

Severity
Critical 9.1
Published
31 Mar 2025
Last changed
11 Apr 2025
Added to UpHeron
3 Nov 2026
Fixed in
2.8.14, 2.9.8, 2.10.4, 2.11.0
Also known as
GHSA-8p83-cpfg-fj3g
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
RancherServers and applications · github:rancher/rancher
  • Every version before 2.11.0
  • From 2.8.0 before 2.8.14
  • From 2.9.0 before 2.9.8
  • From 2.10.0 before 2.10.4

References