CVE-2025-67601 - Vulnerability Analysis

Overview

Rancher Manager contains a misconfiguration vulnerability caused by using self-signed CA certificates with the -skip-verify flag in the CLI login command without the –cacert flag, letting attackers bypass proper certificate verification, exploit requires use of specific CLI flags.

Severity & Score

Impact

Attackers can bypass certificate verification, potentially enabling man-in-the-middle attacks or unauthorized access.

Mitigation

Avoid using -skip-verify without –cacert flag or update to the latest Rancher Manager version with fixed certificate handling.

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-67601
• https://github.com/rancher/rancher/security/advisories/GHSA-mc24-7m59-4q5p

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner