CVE-2025-67601
High
Description
A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the –cacert flag results in the CLI attempting to fetch CA certificates stored in Rancher’s setting cacerts.
SeverityHigh
CVSS8.3
Exploit probability—
Product
Suse Rancher
PublishedFeb 25, 2026
First seenFeb 25, 2026
Weakness typeCWE-295CWE-295
How to fix
Update
- suse rancher2.10.11, 2.11.10, 2.12.6, 2.13.2 or later
- github.com/rancher/rancher0.0.0-20260129092249-bb0625fd1896, 2.13.2, 2.12.6, 2.11.10, 2.10.11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| suse rancher | 2.10.0 ≤ v < 2.10.11, 2.11.0 ≤ v < 2.11.10, 2.12.0 ≤ v < 2.12.6, 2.13.0 ≤ v < 2.13.2 | 2.10.11, 2.11.10, 2.12.6, 2.13.2 |
| github.com/rancher/rancherGo | v < 0.0.0-20260129092249-bb0625fd1896, 2.13.0 ≤ v < 2.13.2, 2.12.0 ≤ v < 2.12.6, 2.11.0 ≤ v < 2.11.10, 2.10.0 ≤ v < 2.10.11, No range specified | 0.0.0-20260129092249-bb0625fd1896, 2.13.2, 2.12.6, 2.11.10, 2.10.11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.