This vulnerability in SUSE Rancher's SAML ACS handler allows replay of SAML assertions because the system does not enforce one-time use. As a result, an attacker who captures a valid SAML assertion could reuse it to authenticate without proper authorization. The vulnerability affects Rancher versions 2.11.0 up to but not including 2.11.15, 2.12.0 up to but not including 2.12.11, 2.13.0 up to but not including 2.13.7, and 2.14.0 up to but not including 2.14.3. The CVSS 4.0 score is 9.5 (critical), indicating a high-severity network attack vector with high impact on confidentiality, integrity, and availability. No official patch or remediation level is indicated in the provided data, and no known exploits in the wild are reported.

Successful exploitation allows an unauthenticated attacker to bypass Rancher's authentication mechanism by replaying a captured SAML assertion. This can lead to unauthorized access with potentially high privileges, compromising confidentiality, integrity, and availability of the Rancher environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting network access to the Rancher ACS endpoint and monitoring for suspicious authentication attempts. Avoid relying solely on SAML assertions without additional replay protections. Follow SUSE's official advisories for updates and apply patches promptly once released.