The vulnerability in suse/sle-micro-rancher/5.3:latest arises from improper handling of user credentials in the socket_handler function of src/havegecmd.c. Although the code detects non-root users and prepares a negative acknowledgement, it does not halt further processing, allowing unauthorized local users to execute privileged commands. This constitutes an authentication bypass (CWE-305) enabling privilege escalation within the container environment. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects that exploitation requires local access with low complexity and results in high impact on confidentiality, integrity, and availability.

Successful exploitation allows any local unprivileged user to bypass authentication checks and execute privileged commands within the affected container. This can lead to full compromise of the container environment, including unauthorized access to sensitive data, modification of system state, and denial of service. The vulnerability affects confidentiality, integrity, and availability with high severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to the affected container environment to trusted users only. Monitor for updates from SUSE regarding patches or temporary mitigations. Avoid running untrusted code or users within the affected container version.