NetSight
medium6.9

CVE-2026-44947

A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users …

Impact

A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those permissions from a RoleTemplate.

Affected products

ProductAffected versions
Rancher Versions 2.13.0
before 2.13.7
2.14.0
before 2.14.3

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References