Database/Container, Kubernetes & orchestration
Rancher: CLI login with -skip-verify and no --cacert silently accepts any certificate
CVE-2025-67601Container, Kubernetes & orchestrationcurated
Impact
CLI login with -skip-verify and no --cacert silently accepts any certificate; MITM on the management API
Who can reach it
Unauthenticated network in a MITM position
What to do
Upgrade Rancher CLI; ban -skip-verify in runbooks
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.