CVE-2021-25320

Go/github.com/rancher/rancher CVE-2021-25320: critical 9.9

Rancher cloud credentials can be used through proxy API by users without access

Action: Upgrade github.com/rancher/rancher to 2.4.16 or later.

go get github.com/rancher/rancher@v2.4.16

go get github.com/rancher/rancher@v2.5.9

Affected

Fixed versions

Sources

• osv: GHSA-gqf8-rvrh-g7w6
• https://github.com/rancher/rancher/security/advisories/GHSA-gqf8-rvrh-g7w6
• https://nvd.nist.gov/vuln/detail/CVE-2021-25320
• https://bugzilla.suse.com/show_bug.cgi?id=1185514
• https://github.com/rancher/rancher

CVE-2021-25320 · published 2026-03-03T14:52:15Z · modified 2026-09-10T03:50:39.311946003Z · JSON

Go/github.com/rancher/rancher CVE-2021-25320: unknown

Rancher cloud credentials can be used through proxy API by users without access in github.com/rancher/rancher

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-4589
• https://github.com/rancher/rancher/security/advisories/GHSA-gqf8-rvrh-g7w6
• https://nvd.nist.gov/vuln/detail/CVE-2021-25320
• https://bugzilla.suse.com/show_bug.cgi?id=1185514

CVE-2021-25320 · published 2026-03-10T18:28:01Z · modified 2026-07-10T18:29:31.997202516Z · JSON