CVE-2021-36784: Suse Rancher

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4.

Affected products

• Suse Rancher: before 2.5.13 (fixed in 2.5.13); from 2.6.0, before 2.6.4 (fixed in 2.6.4)

Published 2022-05-02. Last modified 2026-06-17.