@suriq.io on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

Suriq - Always on Watch

suriq.io

did:plc:6vjp7fbgz5ductueireifliv

SUSE Rancher stored cluster-join tokens in plaintext with no expiry (CVE-2026-55997). A leaked one lets an attacker add a rogue admin node and take over the cluster. Fix: upgrade to 2.14.4 / 2.13.8, then rotate every token. https://suriq.io/blog/rancher-cve-2026-55997-plaintext-cluster-tokens

2026-08-05T08:44:17.869Z