Database/Container, Kubernetes & orchestration
Rancher: SAML assertion replay: the ACS handler does not enforce one-time use, so a captured assertion logs
CVE-2026-44946Container, Kubernetes & orchestrationcurated
Impact
SAML assertion replay: the ACS handler does not enforce one-time use, so a captured assertion logs an attacker in
Who can reach it
Unauthenticated network in a MITM or log-access position
What to do
Emergency Rancher upgrade; invalidate all SAML sessions
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.