14 Total advisories
14 Vulnerabilities
0 Malware
Vulnerabilities
HIGH 8.8
CVE-2026-44938
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
HIGH 7.5
CVE-2026-44937
Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
CRITICAL 9.9
CVE-2026-44935
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
MEDIUM 5.0
CVE-2026-44936
Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
UNKNOWN
CVE-2026-44937
Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components in github.com/rancher/fleet
UNKNOWN
CVE-2026-44935
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer in github.com/rancher/fleet
UNKNOWN
CVE-2026-44936
Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml in github.com/rancher/fleet
UNKNOWN
CVE-2026-44938
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent in github.com/rancher/fleet
CRITICAL 9.9
CVE-2026-41050
Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
UNKNOWN
CVE-2026-41050
Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering in github.com/rancher/fleet
UNKNOWN
CVE-2025-23390
Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet
UNKNOWN
CVE-2024-52284
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet
HIGH 7.7
CVE-2024-52284
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text
MEDIUM 6.3
CVE-2025-23390
Fleet doesn’t validate a server’s certificate when connecting through SSH
Ready to move
Start Securing
Free, no credit card | First findings in minutes