CVE-2026-44939
Vulnerability Description
A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/{token}_{clusterId}.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-95
Source
NVD
Vendor
SUSE
Product
Rancher
Discussion (0)
Add Comment
No comments yet. Be the first!