CVE-2024-58267

Go/github.com/rancher/rancher CVE-2024-58267: high 8, EPSS 0.24%

Rancher CLI SAML authentication is vulnerable to phishing attacks

Action: Upgrade github.com/rancher/rancher to 2.9.12 or later.

go get github.com/rancher/rancher@v2.12.2

go get github.com/rancher/rancher@v2.11.6

go get github.com/rancher/rancher@v2.10.10

go get github.com/rancher/rancher@v2.9.12

Affected

Fixed versions

Sources

• osv: GHSA-v3vj-5868-2ch2
• https://github.com/rancher/rancher/security/advisories/GHSA-v3vj-5868-2ch2
• https://nvd.nist.gov/vuln/detail/CVE-2024-58267
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58267
• https://github.com/rancher/rancher
• https://pkg.go.dev/vuln/GO-2025-3984

CVE-2024-58267 · published 2025-09-26T13:02:44Z · modified 2026-09-10T03:50:28.874966531Z · JSON

Go/github.com/rancher/rancher CVE-2024-58267: high 8, EPSS 0.24%

Rancher CLI SAML authentication is vulnerable to phishing attacks in github.com/rancher/rancher

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-3984
• nvd: CVE-2024-58267
• https://github.com/rancher/rancher/security/advisories/GHSA-v3vj-5868-2ch2
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58267

CVE-2024-58267 · published 2025-10-23T16:25:09Z · modified 2026-07-02T16:59:28.526441587Z · JSON