High severity7.4NVD Advisory· Published Jun 30, 2026· Updated Jul 2, 2026
CVE-2026-44946
CVE-2026-44946
Description
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,
Affected products
2Patches
Vulnerability mechanics
References
1- github.com/rancher/rancher/security/advisories/GHSA-c5jm-xcmq-9j95nvdVendor AdvisoryMitigation
News mentions
0No linked articles in our index yet.