CVE-2023-32198
8.0HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-295
Impact
A privileged attacker in a man-in-the-middle network position can intercept or tamper with outbound TLS traffic from services using Steve. They need existing network interception capabilities and high privileges to exploit this.
Root cause
Steve defaulted to an insecure TLS configuration that disabled remote server certificate validation.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Fix & remediation
Upgrade Rancher Steve to the latest patched version specified in GHSA-95fc-g4gj-mqmx. If patching cannot be done immediately, ensure network traffic between Steve and upstream services runs exclusively over trusted private networks to prevent interception.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote server while performing a TLS connection. This could allow the execution of a man-in-the-middle (MitM) attack against services using Steve.