{"id":"CVE-2026-41052","revision":"e965d0057df94b939392af2f2f5b82e5","records":[{"revision":"e965d0057df94b939392af2f2f5b82e5","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-41052","aliases":[],"title":"Rancher Privilege Escalation from Project Owner to Host","description":"Improper privilege handling could be used by users with\u00A0Project Owner role to escalate privileges, in Rancher versions\u00A02.14 before 2.14.2,\u00A02.13 before 2.13.6, and\u00A02.12 before 2.12.10.","state":0,"publishedAt":"2026-06-29T15:41:56.394+00:00","modifiedAt":"2026-06-30T03:55:34.599+00:00","affected":[{"ecosystem":"Vendor product","name":"Rancher","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"SUSE\",\n                    \"product\": \"Rancher\",\n                    \"packageName\": \"Rancher\",\n                    \"repo\": \"https://github.com/rancher/rancher/\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2.12.0\",\n                            \"lessThan\": \"2.12.10\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2.13.0\",\n                            \"lessThan\": \"2.13.6\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2.14.0\",\n                            \"lessThan\": \"2.14.2\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","score":9.4,"severity":"CRITICAL"}],"references":["https://github.com/rancher/rancher/security/advisories/GHSA-vx8h-4prv-g744"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-41052","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-41052","identifiers":["CVE-2026-41052"]},"retained":false,"historicalAffected":[]}],"coverage":[]}