CVE-2024-58259CWE-770

Rancher affected by unauthenticated Denial of Service

High · published September 2, 2025

CVSS v3.1
8.2
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified within Rancher Manager in which it

did not enforce request body size limits on certain public

(unauthenticated) and authenticated API endpoints. This allows a

malicious user to exploit this by sending excessively large payloads,

which are fully loaded into memory during processing, leading to Denial of Service (DoS).

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-09-02T11:53Z
EPSS history
Timeline
  • 02 SEP 11:53Z
    Rancher affected by unauthenticated Denial of Service
    cvelistv5