Skip to content
OpenAdvisories

Package · Go

github.com/rancher/fleet

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-23390

    Fleet doesn’t validate a server’s certificate when connecting through SSH

    A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the…

    SUSE Fleet github.com/rancher/fleet Go
  • Medium 5.0
    CVE-2026-44936

    Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml

    Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 forwards Helm authentication credentials (BasicAuth)…

    SUSE Rancher github.com/rancher/fleet Go