cve-2026-44949

{
  "cvss": 7.0,
  "datePublished": "2026-06-30T15:16:56.853",
  "dateUpdated": "2026-10-25T21:10:00.770",
  "description": "A Rancher FleetWorkspace admission path allowed side effects to occur in\n the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to\n the in-cluster rancher-webhook service\n could submit a crafted admission payload and cause workspace-related \nKubernetes objects to be created with attacker-chosen identity data.",
  "id": "CVE-2026-44949",
  "raw": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "packageName": "Webhook",
            "product": "Rancher",
            "repo": "https://github.com/rancher/webhook/",
            "vendor": "SUSE",
            "versions": [
              {
                "lessThan": "0.7.10",
                "status": "affected",
                "version": "0.7.0",
                "versionType": "semver"
              },
              {
                "lessThan": "0.8.7",
                "status": "affected",
                "version": "0.8.0",
                "versionType": "semver"
              },
              {
                "lessThan": "0.9.6",
                "status": "affected",
                "version": "0.9.0",
                "versionType": "semver"
              },
              {
                "lessThan": "0.10.7",
                "status": "affected",
                "version": "0.10.0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "meissner@suse.de"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "A Rancher FleetWorkspace admission path allowed side effects to occur in\n the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to\n the in-cluster rancher-webhook service\n could submit a crafted admission payload and cause workspace-related \nKubernetes objects to be created with attacker-chosen identity data."
      },
      {
        "lang": "es",
        "value": "Una ruta de admisión de Rancher FleetWorkspace permitió que se produjeran efectos secundarios en el gestor de webhooks de Rancher para las versiones 0.7.0 hasta 0.7.10, 0.8.0 hasta 0.8.7, 0.9.0 hasta 0.9.6 y 0.10.0 hasta 0.10.7. Un atacante no autenticado con acceso de red al servicio rancher-webhook dentro del clúster podría enviar una carga útil de admisión manipulada y provocar que se crearan objetos de Kubernetes relacionados con el espacio de trabajo con datos de identidad elegidos por el atacante."
      }
    ],
    "id": "CVE-2026-44949",
    "lastModified": "2026-10-25T21:10:00.770",
    "metrics": {
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "meissner@suse.de",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-44949",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-06-30T15:10:07.132296Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-06-30T15:16:56.853",
    "references": [
      {
        "source": "meissner@suse.de",
        "url": "https://github.com/rancher/webhook/security/advisories/GHSA-h83p-cq95-vph4"
      }
    ],
    "sourceIdentifier": "meissner@suse.de",
    "vulnStatus": "Undergoing Analysis",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-306"
          }
        ],
        "source": "meissner@suse.de",
        "type": "Secondary"
      }
    ]
  },
  "severity": "HIGH",
  "source": "nvd",
  "title": "A Rancher FleetWorkspace admission path allowed side effects to occur in\n the Rancher webhook handler for versions 0...."
}