Suse Fleet vulnerabilities

• suse rancher, rancher fleet +1 more Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters CVE-2026-88808 8.8 HighSeptember 28, 2026
• suse rancher, rancher fleet +1 more Fleet applies namespace labels and annotations without the bundle's service account privileges CVE-2026-93540 6.5 MediumSeptember 28, 2026
• suse rancher, rancher fleet +1 more Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver CVE-2026-93539 5.4 MediumSeptember 28, 2026
• suse rancher, rancher fleet +1 more Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet CVE-2026-93538 7.1 HighSeptember 28, 2026
• suse rancher, rancher fleet +1 more Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory CVE-2026-93537 6.5 MediumSeptember 28, 2026
• fleetdm fleet, suse rancher fleet +1 more Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing CVE-2026-75036 5.3 MediumSeptember 3, 2026
• suse rancher, rancher fleet +1 more Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer CVE-2026-44935 Fix available 9.9 CriticalJuly 1, 2026
• suse rancher, rancher fleet +1 more Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml CVE-2026-44936 Fix available 5.0 MediumJuly 1, 2026
• suse rancher, rancher fleet +1 more SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components CVE-2026-44937 Fix available 8.3 HighJuly 1, 2026
• suse rancher, rancher fleet +1 more Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent CVE-2026-44938 Fix available 8.8 HighJuly 1, 2026
• suse rancher, rancher fleet +1 more Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler CVE-2026-44948 5.3 MediumJune 30, 2026
• suse rancher, rancher fleet +1 more Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering CVE-2026-41050 Fix available 9.9 CriticalMay 7, 2026
• fleetdm fleet Fleet doesn’t validate a server’s certificate when connecting through SSH CVE-2025-23390 Fix available 6.3 MediumApril 25, 2025