Vulnerability Details CVE-2026-44935
Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be used by owners of one tenant to access fleet credentials of other tenants.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 40.7%
CVSS Severity
CVSS v3 Score 9.9
Products affected by CVE-2026-44935
-
cpe:2.3:a:suse:rancher_fleet:0.12.0
-
cpe:2.3:a:suse:rancher_fleet:0.12.1
-
cpe:2.3:a:suse:rancher_fleet:0.12.10
-
cpe:2.3:a:suse:rancher_fleet:0.12.11
-
cpe:2.3:a:suse:rancher_fleet:0.12.12
-
cpe:2.3:a:suse:rancher_fleet:0.12.13
-
cpe:2.3:a:suse:rancher_fleet:0.12.14
-
cpe:2.3:a:suse:rancher_fleet:0.12.2
-
cpe:2.3:a:suse:rancher_fleet:0.12.3
-
cpe:2.3:a:suse:rancher_fleet:0.12.4
-
cpe:2.3:a:suse:rancher_fleet:0.12.5
-
cpe:2.3:a:suse:rancher_fleet:0.12.6
-
cpe:2.3:a:suse:rancher_fleet:0.12.7
-
cpe:2.3:a:suse:rancher_fleet:0.12.8
-
cpe:2.3:a:suse:rancher_fleet:0.12.9
-
cpe:2.3:a:suse:rancher_fleet:0.13.0
-
cpe:2.3:a:suse:rancher_fleet:0.13.1
-
cpe:2.3:a:suse:rancher_fleet:0.13.10
-
cpe:2.3:a:suse:rancher_fleet:0.13.2
-
cpe:2.3:a:suse:rancher_fleet:0.13.3
-
cpe:2.3:a:suse:rancher_fleet:0.13.4
-
cpe:2.3:a:suse:rancher_fleet:0.13.5
-
cpe:2.3:a:suse:rancher_fleet:0.13.6
-
cpe:2.3:a:suse:rancher_fleet:0.13.7
-
cpe:2.3:a:suse:rancher_fleet:0.13.8
-
cpe:2.3:a:suse:rancher_fleet:0.13.9
-
cpe:2.3:a:suse:rancher_fleet:0.14.0
-
cpe:2.3:a:suse:rancher_fleet:0.14.1
-
cpe:2.3:a:suse:rancher_fleet:0.14.2
-
cpe:2.3:a:suse:rancher_fleet:0.14.3
-
cpe:2.3:a:suse:rancher_fleet:0.14.4
-
cpe:2.3:a:suse:rancher_fleet:0.14.5
-
cpe:2.3:a:suse:rancher_fleet:0.15.0
-
cpe:2.3:a:suse:rancher_fleet:0.15.1