CVE-2022-43759: Suse Rancher

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to escalate permissions for any -promoted resource in any cluster. This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10.

Affected products

• Suse Rancher: from 2.5.0, before 2.5.17 (fixed in 2.5.17); from 2.6.0, before 2.6.10 (fixed in 2.6.10)

Published 2023-02-07. Last modified 2026-06-17.