Skip to content
Suse Rancher Fleet vulnerabilities
-
suse rancher, rancher fleet +1 more
Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters
CVE-2026-88808
8.8 High
-
suse rancher, rancher fleet +1 more
Fleet applies namespace labels and annotations without the bundle's service account privileges
CVE-2026-93540
6.5 Medium
-
suse rancher, rancher fleet +1 more
Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver
CVE-2026-93539
5.4 Medium
-
suse rancher, rancher fleet +1 more
Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet
CVE-2026-93538
7.1 High
-
suse rancher, rancher fleet +1 more
Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory
CVE-2026-93537
6.5 Medium
-
fleetdm fleet, suse rancher fleet +1 more
Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing
CVE-2026-75036
5.3 Medium
-
suse rancher, rancher fleet +1 more
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
CVE-2026-44935
Fix available
9.9 Critical
-
suse rancher, rancher fleet +1 more
Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
CVE-2026-44936
Fix available
5.0 Medium
-
suse rancher, rancher fleet +1 more
SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
CVE-2026-44937
Fix available
8.3 High
-
suse rancher, rancher fleet +1 more
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
CVE-2026-44938
Fix available
8.8 High
-
suse rancher, rancher fleet +1 more
Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler
CVE-2026-44948
5.3 Medium
-
suse rancher, rancher fleet +1 more
Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
CVE-2026-41050
Fix available
9.9 Critical