CVE-2025-67601 HIGH

CVE-2025-67601: Rancher CLI skips TLS verification on Rancher CLI login command

Vendor Suse
Product rancher
Weakness CWE-295
Published February 25, 2026
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

8.3/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the –cacert flag results in the CLI attempting to fetch CA certificates stored in Rancher’s setting cacerts.

Key dates

02Disclosure timeline

February 25, 2026 CVE published
February 26, 2026 Record updated