Skip to content
OpenAdvisories

Package · Go

github.com/rancher/fleet

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-44938

    Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

    A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeployment.spec.options.namespaceLabels) when applying them to the target namespace. An attacker with…

    SUSE Rancher github.com/rancher/fleet Go
  • High 8.3
    CVE-2026-44937

    SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components

    Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.5 could be used by remote attackers to cause a denial of service or a downgrade a…

    SUSE Rancher github.com/rancher/fleet Go
  • High 7.7
    CVE-2024-52284

    Rancher Fleet Helm Values are stored inside BundleDeployment in plain text

    Unauthorized disclosure of sensitive data: Any user with `GET` or `LIST` permissions on `BundleDeployment` resources could retrieve Helm values containing credentials or other secrets.

    SUSE Rancher github.com/rancher/fleet fleet Ubuntu Go