Vulnerability Details CVE-2026-44935
Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be used by owners of one tenant to access fleet credentials of other tenants.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 43.2%
CVSS Severity
CVSS v3 Score 9.9
Products affected by CVE-2026-44935
-
cpe:2.3:a:suse:rancher_fleet:0.12.0
-
cpe:2.3:a:suse:rancher_fleet:0.12.1
-
cpe:2.3:a:suse:rancher_fleet:0.12.10
-
cpe:2.3:a:suse:rancher_fleet:0.12.11
-
cpe:2.3:a:suse:rancher_fleet:0.12.12
-
cpe:2.3:a:suse:rancher_fleet:0.12.13
-
cpe:2.3:a:suse:rancher_fleet:0.12.14
-
cpe:2.3:a:suse:rancher_fleet:0.12.2
-
cpe:2.3:a:suse:rancher_fleet:0.12.3
-
cpe:2.3:a:suse:rancher_fleet:0.12.4
-
cpe:2.3:a:suse:rancher_fleet:0.12.5
-
cpe:2.3:a:suse:rancher_fleet:0.12.6
-
cpe:2.3:a:suse:rancher_fleet:0.12.7
-
cpe:2.3:a:suse:rancher_fleet:0.12.8
-
cpe:2.3:a:suse:rancher_fleet:0.12.9
-
cpe:2.3:a:suse:rancher_fleet:0.13.0
-
cpe:2.3:a:suse:rancher_fleet:0.13.1
-
cpe:2.3:a:suse:rancher_fleet:0.13.10
-
cpe:2.3:a:suse:rancher_fleet:0.13.2
-
cpe:2.3:a:suse:rancher_fleet:0.13.3
-
cpe:2.3:a:suse:rancher_fleet:0.13.4
-
cpe:2.3:a:suse:rancher_fleet:0.13.5
-
cpe:2.3:a:suse:rancher_fleet:0.13.6
-
cpe:2.3:a:suse:rancher_fleet:0.13.7
-
cpe:2.3:a:suse:rancher_fleet:0.13.8
-
cpe:2.3:a:suse:rancher_fleet:0.13.9
-
cpe:2.3:a:suse:rancher_fleet:0.14.0
-
cpe:2.3:a:suse:rancher_fleet:0.14.1
-
cpe:2.3:a:suse:rancher_fleet:0.14.2
-
cpe:2.3:a:suse:rancher_fleet:0.14.3
-
cpe:2.3:a:suse:rancher_fleet:0.14.4
-
cpe:2.3:a:suse:rancher_fleet:0.14.5
-
cpe:2.3:a:suse:rancher_fleet:0.15.0
-
cpe:2.3:a:suse:rancher_fleet:0.15.1