A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the def…

A critical privilege escalation vulnerability has been identified in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated user with only the default global user role can exploit this flaw to gain full administrative access to the Rancher control plane. This administrative access transitively extends to all downstream Kubernetes clusters managed by Rancher. The vulnerability affects multiple Rancher versions across four major release lines: 2.11.x before 2.11.16, 2.12.x before 2.12.12, 2.13.x before 2.13.8, and 2.14.x before 2.14.2. The issue has been documented in SUSE's Bugzilla, and a fix has been submitted via a pull request on the official Rancher GitHub repository. A GitHub Security Advisory (GHSA-v584-7w32-jwpq) has also been published. Organizations running affected versions of Rancher should upgrade immediately to mitigate the risk of unauthorized administrative access.