GO-2026-4393
NoneCVSS
—
EPSS
—
Published
Feb 2, 2026
CISA due date
—
The record
Rancher CLI skips TLS verification on Rancher CLI login command in github.com/rancher/rancher
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/rancher/rancher | 0 | No fix |
| Go | github.com/rancher/rancher | 0 | 0.0.0-20260129092249-bb0625fd1896 |
| Go | github.com/rancher/rancher | 2.10.0 | 2.10.11 |
| Go | github.com/rancher/rancher | 2.11.0 | 2.11.10 |
| Go | github.com/rancher/rancher | 2.12.0 | 2.12.6 |
| Go | github.com/rancher/rancher | 2.13.0 | 2.13.2 |
Related vulnerabilities
- CVE-2025-67601 A vulnerability has been identified within Rancher Manager, where using self-signed CA… Same vulnerability
- CVE-2024-58269 A vulnerability has been identified in Rancher Manager, where sensitive information… Also affects github.com/rancher/rancher
- CVE-2023-32199 A vulnerability has been identified within Rancher Manager, where after removing a custom… Also affects github.com/rancher/rancher