Unrated severityNVD Advisory· Published Jun 30, 2026· Updated Jul 1, 2026
SAML Authentication Replay in Rancher
CVE-2026-44946
Description
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,
Patches
Vulnerability mechanics
References
1- github.com/rancher/rancher/security/advisories/GHSA-c5jm-xcmq-9j95mitrevendor-advisory
News mentions
0No linked articles in our index yet.