CVE-2026-44938

creationtimestamp| type| source ---|---|--- 2026-07-07 15:37:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2wp7phd52e...

CVE-2026-44938 Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a Fleet-monitored...