Skip to main content
EPSS 0.4%top 73%

Security fixes in rancher-agent 2.14.3-r0 (CVE-2026-53492)

0
High
Published: 09/01/2026 (09/01/2026, 11:17:16 UTC)
Source: GCVE Database
Product: rancher-agent

Description

The rancher-agent package version 2.14.3-r0 addresses 17 security vulnerabilities including CVE-2026-53492. This release provides security fixes to mitigate these issues. Versions prior to 2.14.3-r0 are affected. No CVSS score is available for CVE-2026-53492 specifically. There are no known exploits in the wild for this vulnerability. The affected product is not a cloud service, so remediation requires updating the software to the fixed version.

Affected software

Alpineghsa
rancher-agent
Affected versions
<2.14.3-r0=2.14.3-r0

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 09/08/2026, 01:53:23 UTC

Technical Analysis

CVE-2026-53492 is one of 17 vulnerabilities fixed in rancher-agent version 2.14.3-r0. The package is part of the Alpine ecosystem. The vendor has released version 2.14.3-r0 which includes security patches addressing these vulnerabilities. No detailed technical information or CVSS score is provided for CVE-2026-53492. The vulnerability affects all versions before 2.14.3-r0. There is no indication of active exploitation in the wild.

Potential Impact

The vulnerabilities fixed in rancher-agent prior to version 2.14.3-r0 potentially expose users to security risks that have been mitigated by the patch. Without specific CVSS or detailed impact data, the exact impact cannot be fully assessed. However, the presence of multiple vulnerabilities suggests a meaningful security risk if unpatched.

Mitigation Recommendations

Users should upgrade rancher-agent to version 2.14.3-r0 or later to apply the official security fixes. Since this is not a cloud service, remediation requires manual update of the software. There are no known exploits in the wild, so immediate emergency response is not indicated, but timely patching is recommended.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
CLEANSTART-2026-ZU67009
Osv Schema Version
1.7.3
Ecosystems
["Alpine"]

Threat ID: 6a984539acd9273b496aabb6

Added to database: 09/02/2026, 15:48:09 UTC

Last enriched: 09/08/2026, 01:53:23 UTC

Last updated: 10/18/2026, 18:48:21 UTC

Views: 32

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses