CVE-2021-4200: Suse Rancher

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4.

Affected products

• Suse Rancher: before 2.5.13 (fixed in 2.5.13); from 2.6.0, before 2.6.4 (fixed in 2.6.4)

Published 2022-05-02. Last modified 2026-06-17.