High severity8.3NVD Advisory· Published Feb 25, 2026· Updated Jun 17, 2026
CVE-2025-67601
CVE-2025-67601
Description
A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the –cacert flag results in the CLI attempting to fetch CA certificates stored in Rancher’s setting cacerts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/rancher/rancherGo | < 0.0.0-20260129092249-bb0625fd1896 | 0.0.0-20260129092249-bb0625fd1896 |
github.com/rancher/rancherGo | >= 2.13.0, < 2.13.2 | 2.13.2 |
github.com/rancher/rancherGo | >= 2.12.0, < 2.12.6 | 2.12.6 |
github.com/rancher/rancherGo | >= 2.11.0, < 2.11.10 | 2.11.10 |
github.com/rancher/rancherGo | >= 2.10.0, < 2.10.11 | 2.10.11 |
Affected products
5- ghsa-coords3 versionspkg:golang/github.com/rancher/rancherpkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2015.6
< 0.0.0-20260129092249-bb0625fd1896+ 2 more
- (no CPE)range: < 0.0.0-20260129092249-bb0625fd1896
- (no CPE)range: < 0.0.20260723T184607-160000.1.1
- (no CPE)range: < 0.0.20260205T172317-150000.1.146.1
Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-mc24-7m59-4q5pghsaADVISORY
- github.com/rancher/rancher/security/advisories/GHSA-mc24-7m59-4q5pnvdVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2025-67601ghsaADVISORY
- attack.mitre.org/techniques/T1557ghsaWEB
- bugzilla.suse.com/show_bug.cginvdIssue TrackingWEB
- github.com/rancher/rancher/releases/tag/v2.13.2ghsaWEB
News mentions
0No linked articles in our index yet.