{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/rancher/rancher","cve_ids":["CVE-2025-67601"],"ecosystem":"Go","epss":0.00167,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mc24-7m59-4q5p","id":"tcs_01M5KGDGWHJVVN67ZPWJQY48GV","modified_at":"2026-02-02T22:26:09.052229Z","published_at":"2026-02-02T21:05:59Z","references":["https://osv.dev/vulnerability/GO-2026-4393","https://github.com/rancher/rancher/security/advisories/GHSA-mc24-7m59-4q5p","https://attack.mitre.org/techniques/T1557","https://github.com/rancher/rancher/releases/tag/v2.13.2"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4393","url":"https://osv.dev/vulnerability/GO-2026-4393"}],"summary":"Rancher CLI skips TLS verification on Rancher CLI login command in github.com/rancher/rancher"}