CVE-2021-36775: Rancher

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. This issue affects: SUSE Rancher Rancher versions prior to 2.4.18; Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.

Affected products

• Rancher Rancher: before 2.4.18 (fixed in 2.4.18); from 2.5.0, before 2.5.12 (fixed in 2.5.12); from 2.6.0, before 2.6.3 (fixed in 2.6.3)

Published 2022-04-04. Last modified 2026-06-17.