High severity7.4NVD Advisory· Published Sep 3, 2026· Updated Sep 18, 2026
CVE-2026-75034
CVE-2026-75034
Description
A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a captured assertion could replay it once against every other replica to obtain additional authenticated sessions as the victim.
This issue affects Rancher: before 2.15.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2.15.1
Patches
Vulnerability mechanics
References
1- github.com/rancher/rancher/releases/tag/v2.15.1nvdRelease Notes
News mentions
0No linked articles in our index yet.