Critical severity9.1NVD Advisory· Published Apr 11, 2025· Updated Apr 15, 2026
CVE-2025-23391
CVE-2025-23391
Description
A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts. This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/rancher/rancherGo | >= 2.8.0, < 2.8.14 | 2.8.14 |
github.com/rancher/rancherGo | >= 2.9.0, < 2.9.8 | 2.9.8 |
github.com/rancher/rancherGo | >= 2.10.0, < 2.10.4 | 2.10.4 |
Patches
3d704a664ad62887911671e613fdfa8c24361Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
4News mentions
0No linked articles in our index yet.