Skip to content
OpenAdvisories

Product · SUSE

Fleet

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-23390

    Fleet doesn’t validate a server’s certificate when connecting through SSH

    A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the…

    SUSE Fleet github.com/rancher/fleet Go
  • Medium 5.3
    CVE-2026-75036

    Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing

    A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a…

    SUSE Fleet