CVE-2022-21947: Suse Rancher Desktop

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

Affected products

• Suse Rancher Desktop: before 1.2.1 (fixed in 1.2.1)

Published 2022-04-01. Last modified 2026-06-17.