Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-88808

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to…

Risk score
57/100
CVSS
8.8 v3.1
Exploit chance (30 days)
0.3%
Published
28 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment. It affects multi-tenancy environments where different tenants share the same downstream clusters, for e…
Affected
Suse Rancher Fleet before 0.16.2, 0.15, 0.15.7, 0.14, 0.14.11
Fix
Upgrade Suse Rancher Fleet to 0.16.2, 0.15, 0.15.7, 0.14 or 0.14.11 (whichever matches your release line), or later.
Exploitation
No known exploitation

Story map

Story map: Suse Rancher FleetTHE FLAWSTHE FIXCVE-2026-88808A vulnerability has beenidentified within RancherManager where the Fleet…CVSS 8.8 · EPSS 0%CVE-2026-93538Authorisation bypassCVSS 7.1 · EPSS 0%CVE-2026-93537Path traversalCVSS 6.5 · EPSS 0%CVE-2026-93540A privilege mismatch was foundin FleetCVSS 6.5 · EPSS 0%Upgrade Suse Rancher Fleet0.16.2 · 0.15 · 0.15.7 · 0.14 ·0.14.11 · 0.16.1or later on your release lineWho is exposedSuse Rancher Fleet before0.16.2, 0.15, 0.15.7, 0.14, 0.14.11YELLOW · PLAN IT INSuse RancherFleetA vulnerability has beenidentified within RancherManager where the Fleet agentwrote resources to downstreamclusters using its owncluster-admin credentialsinstead of the ServiceAccount…Where it standsNo known exploitationCONNECTS TOSame weaknessCWE-250 (CWE-250)13 other warnings in 30 days →Same productEarlier Suse Rancher Fleet warnings1 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Suse Rancher Fleet: Yellow, plan it in. A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment. It affects multi-tenancy environments where different tenants share the same downstream clusters, for e…

The flaws

  • CVE-2026-88808: A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to… (CVSS 8.8 · EPSS 0%)
  • CVE-2026-93538: Authorisation bypass (CVSS 7.1 · EPSS 0%)
  • CVE-2026-93537: Path traversal (CVSS 6.5 · EPSS 0%)
  • CVE-2026-93540: A privilege mismatch was found in Fleet (CVSS 6.5 · EPSS 0%)

The fix

Upgrade Suse Rancher Fleet: 0.16.2 · 0.15 · 0.15.7 · 0.14 · 0.14.11 · 0.16.1 or later on your release line

Who is exposed: Suse Rancher Fleet before 0.16.2, 0.15, 0.15.7, 0.14, 0.14.11

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 8.8 high

References

Original description

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment. It affects multi-tenancy environments where different tenants share the same downstream clusters, for example different privileged or untrusted teams inside the same organization. This could lead to overwritten configuration files. This issue affected SUSE Rancher Fleet 0.16 before 0.16.2, 0.15 before 0.15.7, and 0.14 before 0.14.11.

Last activity 28 Sep 2026. Patch Forecast updates every hour.