Rancher — Vulnerabilities & Security Advisories 3

Rancher is an open-source platform for managing Kubernetes clusters, enabling organizations to deploy, secure, and operate containerized applications at scale. Historically, it has been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from misconfigurations or insecure default settings. Notable security characteristics include its role as a management layer for multiple Kubernetes distributions, which can amplify the impact of compromises. While no major public incidents have been widely documented, the platform's CVE history highlights risks associated with its web interface and API endpoints, particularly in default installations where security hardening may be overlooked.