Go/github.com/rancher/rancher CVE-2023-32196, CVE-2023-32197: unknown, EPSS 0.55%

Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists in github.com/rancher/rancher

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-3220
• https://github.com/rancher/rancher/security/advisories/GHSA-7h8m-pvw3-5gh4

CVE-2023-32196, CVE-2023-32197 · published 2024-10-28T15:20:02Z · modified 2026-07-02T14:44:22.171157986Z · JSON