VendorsSUSErancher_fleetany version
Vulnerabilities

SUSE Rancher Fleet any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

12CVEs
CVE-2026-44935
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
Published 2026-07-02 · Analyzed
9.9EPSS 0.005
CVE-2026-41050
Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
Published 2026-05-13 · Analyzed
9.9EPSS 0.004
CVE-2026-44938
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
Published 2026-07-07 · Analyzed
8.8EPSS 0.004
CVE-2026-88808
Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters
Published 2026-09-28 · Analyzed
8.8EPSS 0.003
CVE-2026-44937
SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
Published 2026-07-06 · Analyzed
8.3EPSS 0.004
CVE-2026-93538
Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet
Published 2026-09-28 · Analyzed
7.1EPSS 0.002
CVE-2026-93537
Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory
Published 2026-09-28 · Analyzed
6.5EPSS 0.003
CVE-2026-93540
Fleet applies namespace labels and annotations without the bundle's service account privileges
Published 2026-09-28 · Analyzed
6.5EPSS 0.002
CVE-2026-93539
Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver
Published 2026-09-28 · Analyzed
5.4EPSS 0.002
CVE-2026-44948
Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler
Published 2026-06-30 · Analyzed
5.3EPSS 0.005
CVE-2026-75036
Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing
Published 2026-09-03 · Analyzed
5.3EPSS 0.002
CVE-2026-44936
Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
Published 2026-07-06 · Analyzed
5.0EPSS 0.003