Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-93537

Suse Rancher Fleet: path traversal

Risk score
44/100
CVSS
6.5 v3.1
Exploit chance (30 days)
0.3%
Published
28 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or modify a GitRepo, can cause SUSE Rancher Fleet to read files from the filesystem of the environment that processes the bundle and include their contents in the …
Affected
Suse Rancher Fleet before 0.16.2, 0.15, 0.15.7, 0.14, 0.14.11, 0.13, 0.13.16, 0.12
Fix
Upgrade Suse Rancher Fleet to 0.16.2, 0.15, 0.15.7, 0.14, 0.14.11, 0.13, 0.13.16 or 0.12 (whichever matches your release line), or later.
Exploitation
No known exploitation

Story map

Story map: Suse Rancher FleetTHE FLAWSTHE FIXCVE-2026-93537Path traversalCVSS 6.5 · EPSS 0%CVE-2026-88808A vulnerability has beenidentified within RancherManager where the Fleet…CVSS 8.8 · EPSS 0%CVE-2026-93538Authorisation bypassCVSS 7.1 · EPSS 0%CVE-2026-93540A privilege mismatch was foundin FleetCVSS 6.5 · EPSS 0%Upgrade Suse Rancher Fleet0.16.2 · 0.15 · 0.15.7 · 0.14 ·0.14.11 · 0.13or later on your release lineWho is exposedSuse Rancher Fleet before0.16.2, 0.15, 0.15.7, 0.14, 0.14.11YELLOW · PLAN IT INSuse RancherFleetA vulnerability has beenidentified within RancherManager where the Fleet agentwrote resources to downstreamclusters using its owncluster-admin credentialsinstead of the ServiceAccount…Where it standsNo known exploitationCONNECTS TOSame weaknessPath traversal (CWE-23)26 other warnings in 30 days →Same productEarlier Suse Rancher Fleet warnings1 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Suse Rancher Fleet: Yellow, plan it in. A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment. It affects multi-tenancy environments where different tenants share the same downstream clusters, for e…

The flaws

  • CVE-2026-93537: Path traversal (CVSS 6.5 · EPSS 0%)
  • CVE-2026-88808: A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to… (CVSS 8.8 · EPSS 0%)
  • CVE-2026-93538: Authorisation bypass (CVSS 7.1 · EPSS 0%)
  • CVE-2026-93540: A privilege mismatch was found in Fleet (CVSS 6.5 · EPSS 0%)

The fix

Upgrade Suse Rancher Fleet: 0.16.2 · 0.15 · 0.15.7 · 0.14 · 0.14.11 · 0.13 or later on your release line

Who is exposed: Suse Rancher Fleet before 0.16.2, 0.15, 0.15.7, 0.14, 0.14.11

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 6.5 medium

References

Original description

A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or modify a GitRepo, can cause SUSE Rancher Fleet to read files from the filesystem of the environment that processes the bundle and include their contents in the generated Bundle resource. This can expose configuration or credential material that the user has no Kubernetes RBAC permission to read, including Helm registry credentials made available to the bundle-processing job when per-path Helm credentials are configured. This affects Fleet 0.16 before 0.16.2, 0.15 before 0.15.7, 0.14 before 0.14.11, 0.13 before 0.13.16, 0.12 before 0.12.20 and potentially older unsupported versions.

Last activity 28 Sep 2026. Patch Forecast updates every hour.