Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.0

Rancher CLI can be tricked to reveal authentication tokens

CVE-2024-58267 · published 1 year ago
Summary

The Rancher command‑line tool that uses SAML sign‑in can be deceived by a fake login page, allowing an attacker to capture the user’s authentication token. This could let the attacker act as the legitimate user within Rancher. Use only trusted login URLs and consider switching to a more secure authentication method until the issue is fixed.

What to do
  • Update github.com rancher to version 2.12.2.
  • Update github.com rancher to version 2.11.6.
  • Update github.com rancher to version 2.10.10.
  • Update github.com rancher to version 2.9.12.
Affected software
Ecosystem VendorProductAffected versions
go github.com rancher >= 2.12.0, < 2.12.2
>= 2.11.0, < 2.11.6
>= 2.10.0, < 2.10.10
>= 2.9.0, < 2.9.12
Fix: upgrade to 2.12.2
Original advisory text
Rancher CLI SAML authentication is vulnerable to phishing attacks
A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.0 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-345Insufficient Verification of Data Authenticity
Timeline
Published2 Oct 2025
Updated4 Nov 2026
First seen6 Mar 2026
Sources
GHSA-v3vj-5868-2ch2 · GHSA
CVE-2024-58267 · NVD
CVE-2024-58267 · OSV
Track software like this
Free during beta