Aller au contenu
en Se connecter
9.9 Critique

CVE-2026-41050 Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git…

Description

Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their `GitRepo`.

Produits et versions touchés

Produit Versions touchées Corrigé en
Rancher 0.15 0.15.0 → < 0.15.1 0.15.1
Rancher 0.14 0.14.0 → < 0.14.5 0.14.5
Rancher 0.13 0.13.0 → < 0.13.10 0.13.10
Rancher 0.12 0.12.0 → < 0.12.14 0.12.14
Rancher 0.11 0.11.0 → < 0.11.13 0.11.13

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Rancher

Les 86 CVE de Rancher →
CVE-2026-88811 Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud… 9.1 Critique CVE-2026-88810 A privilege escalation issue was discovered in Rancher Manager's role-based access control 7.2 Élevée CVE-2026-88809 A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy) 7.6 Élevée CVE-2026-94290 SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent… 9.1 Critique
Suivre cette CVE