CVE-2026-59675

{
  "id": "CVE-2026-59675",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-05T08:16:34.593",
  "lastModified": "2026-10-24T16:10:00.153",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. Because the audit middleware is positioned earlier in the handler chain than Rancher's APIBodyLimitingHandler, the body-size cap (default 1 MiB) is bypassed for requests that pass through the audit copyReqBody path. An unauthenticated attacker can send arbitrarily large request bodies to the public login endpoints, causing the Rancher Manager server process to allocate memory proportional to the supplied body size. With just a few concurrent connections, this can exhaust available memory and terminate the Rancher Manager plane process, making the Rancher API and UI unavailable and interrupting management of all downstream clusters."
    },
    {
      "lang": "es",
      "value": "Cuando el registro de auditoría de la API está habilitado, el middleware lee el cuerpo completo de la solicitud HTTP en la memoria sin aplicar un límite de tamaño en los puntos finales de inicio de sesión. Debido a que el middleware de auditoría está posicionado antes en la cadena de gestores que el APIBodyLimitingHandler de Rancher, el límite de tamaño del cuerpo (predeterminado 1 MiB) se omite para las solicitudes que pasan por la ruta de auditoría copyReqBody. Un atacante no autenticado puede enviar cuerpos de solicitud arbitrariamente grandes a los puntos finales de inicio de sesión públicos, haciendo que el proceso del servidor de Rancher Manager asigne memoria proporcional al tamaño del cuerpo suministrado. Con solo unas pocas conexiones concurrentes, esto puede agotar la memoria disponible y terminar el proceso del plano de Rancher Manager, dejando la API y la UI de Rancher no disponibles e interrumpiendo la gestión de todos los clústeres descendentes."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "SUSE",
          "product": "Rancher",
          "defaultStatus": "unaffected",
          "packageName": "Rancher",
          "versions": [
            {
              "version": "2.14.0",
              "lessThan": "2.14.4",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.13.0",
              "lessThan": "2.13.8",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.12.0",
              "lessThan": "2.12.12",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-05T13:14:41.312459Z",
          "id": "CVE-2026-59675",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-59675",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/rancher/rancher/security/advisories/GHSA-g4f6-44g4-23xm",
      "source": "[email protected]"
    }
  ]
}