The new Rancher Fleet vulnerabilities patch resolves two Rancher Fleet vulnerabilities, including cluster-admin privilege escalation flaw CVE-2026-94290.
Fleet
Rancher Fleet fixes a 9.9 CVSS flaw (CVE-2026-41050) allowing tenants to bypass ServiceAccount isolation and steal secrets. Upgrade your GitOps engine now!
A new high-severity vulnerability in SUSE Rancher's Fleet engine (CVE-2024-52284) exposes sensitive Helm chart credentials in plain text.
The CVE-2024-22030 flaw carries a medium-to-high severity rating and if exploited, a malicious actor to take over existing Rancher nodes.