CVE-2026-88805

In SUSE Rancher 2.15 before 2.15.2, incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out, potentially leading to unauthorized access.

An attacker who obtains credentials may retain access to the system even after the victim logs out, potentially leading to prolonged unauthorized access and security compromise.

Update SUSE Rancher to version 2.15.2 or later. Additionally, monitor sessions and credentials for unauthorized use.