CVEvulnerability

CVE-2026-44935

9.9 CRITICAL Published 2026-07-02 Modified 2026-10-25 Official page ↗
Status
Analyzed
Published
2026-07-02
Last modified
2026-10-25
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.9 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-1287

Description

Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be used by owners of one tenant to access fleet credentials of other tenants.

Affected configurations

• suse rancher fleet (>= 0.12.0 < 0.12.15) • suse rancher fleet (>= 0.13.0 < 0.13.11) • suse rancher fleet (>= 0.14.0 < 0.14.6) • suse rancher fleet (>= 0.15.0 < 0.15.2)

Related

Weakness · CWE (1)

  • CWE-1287 Improper Validation of Specified Type of Input weakness

References