CVE-2025-67601
High · 8.3CVSS
8.3
EPSS
0.2%
Published
Feb 25, 2026
CISA due date
—
The record
A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the –cacert flag results in the CLI attempting to fetch CA certificates stored in Rancher’s setting cacerts.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/rancher/rancher | 0 | No fix |
| Go | github.com/rancher/rancher | 0 | 0.0.0-20260129092249-bb0625fd1896 |
| Go | github.com/rancher/rancher | 2.10.0 | 2.10.11 |
| Go | github.com/rancher/rancher | 2.11.0 | 2.11.10 |
| Go | github.com/rancher/rancher | 2.12.0 | 2.12.6 |
| Go | github.com/rancher/rancher | 2.13.0 | 2.13.2 |
| openSUSE:Leap 15.6 | govulncheck-vulndb | 0 | 0.0.20260205T172317-150000.1.146.1 |
Related vulnerabilities
- GO-2026-4393 Rancher CLI skips TLS verification on Rancher CLI login command in… Same vulnerability
- CVE-2024-58269 A vulnerability has been identified in Rancher Manager, where sensitive information… Also affects github.com/rancher/rancher
- CVE-2023-32199 A vulnerability has been identified within Rancher Manager, where after removing a custom… Also affects github.com/rancher/rancher
- CVE-2026-33990 Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using… Also affects govulncheck-vulndb
- CVE-2026-34204 MinIO is a high-performance object storage system. Also affects govulncheck-vulndb
- CVE-2026-34041 act is a project which allows for local running of github actions. Also affects govulncheck-vulndb
- CVE-2026-34042 act is a project which allows for local running of github actions. Also affects govulncheck-vulndb
- CVE-2026-34040 Moby is an open source container framework. Also affects govulncheck-vulndb