CVE-2026-44946 — SAML Authentication Replay in Rancher
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, potentially allowing person in…
Published: 2026-06-30 · CVSS: 9.5 · CVSS 4.0
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7