CVE-2021-36778: Suse Rancher

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers. This issue affects: SUSE Rancher Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.

Affected products

• Suse Rancher: before 2.5.12 (fixed in 2.5.12); from 2.6.0, before 2.6.3 (fixed in 2.6.3)

Published 2022-05-02. Last modified 2026-06-17.