CVE-2026-44947 MEDIUM

CVE-2026-44947: Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher

Vendor Suse
Product Rancher
Weakness CWE-281
Published June 30, 2026
Last update June 30, 2026
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N

What the vulnerability does

01Description

A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those permissions from a RoleTemplate.

Key dates

02Disclosure timeline

June 30, 2026 CVE published
June 30, 2026 Record updated