CVE-2026-88805
Session Not Revoked Server-Side on Logout in Rancher
- State
- Published
- Severity
- 8.1 High
- Published
- Sep 28, 2026
- Updated
- Sep 29, 2026
- Reserved
- Sep 10, 2026
Description
Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.15.2.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.1 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N | suse |
Weaknesses
- CWE-613 Insufficient session expiration
Affected Products
| Product | Versions |
|---|---|
RancherSUSE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.