VULNERABILITY INTELLIGENCE

CVE-2026-44947

EPSS probability0.39%
CISA KEVNot currently listed
Published2026-06-30
Last modified2026-10-25

Description

A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those permissions from a RoleTemplate.

Weakness classification

  • meissner@suse.de: CWE-281

Primary references