Unrated severityNVD Advisory· Published Jun 30, 2026· Updated Jun 30, 2026
Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher
CVE-2026-44947
Description
A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those permissions from a RoleTemplate.
Patches
Vulnerability mechanics
References
1- github.com/rancher/rancher/security/advisories/GHSA-c4rp-wgqc-mfhcmitrevendor-advisory
News mentions
0No linked articles in our index yet.