---
cve: "CVE-2026-44947"
severity: "MEDIUM"
cvss: 6.9
epss: "23%"
vendor: "SUSE"
kev: false
exploited: false
published: "2026-06-30 15:16:56"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-08T16:05:23+02:00"
---

# CVE-2026-44947

> 6.9 MEDIUM · 🧪 PoC

## Beschreibung

A missing clean-up in the legacy Project Role Template Binding (PRTB) 
reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security 
Admission (PSA) permissions after an administrator removes those 
permissions from a RoleTemplate.

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Keine | bad |

## Patch verfügbar (OSV)

- 81dc2c4ed99c5d478f01ab1a6d4def772df349c6 (Commit)
- 4603afd276483411c06a2b716eca38931b564e48 (Commit)

## Referenzen

- <https://github.com/rancher/rancher/security/advisories/GHSA-c4rp-wgqc-mfhc>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-44947) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_