← Database

CVE-2026-44935

CRITICAL CVSS: 9.9 Published: 2026-07-02 Modified: 2026-07-06

Description

Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be used by owners of one tenant to access fleet credentials of other tenants.

Affected Platforms

Suse Rancher Fleet

Weakness Type

CWE-1287

References