CVE-2019-12303: Suse Rancher

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

In Rancher 2 through 2.2.3, Project owners can inject additional fluentd configuration to read files or execute arbitrary commands inside the fluentd container.

Affected products

  • Suse Rancher: from 2.0.0, up to and including 2.2.3

Published 2019-06-06. Last modified 2026-06-17.