PT-2026-40970

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.81.0 Description A denial-of-service DoS issue exists in the gRPC Launcher "PublishLogs" endpoint. Certain unexpected input values are not handled gracefully, which can cause the server process to terminate while...

PT-2026-40969

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.82.0 Description A flaw in the Windows MDM enrollment flow allows authentication tokens from any Azure AD tenant to be accepted. The software validates JWT JSON Web Token signatures using Microsoft's multi-tenant JWKS...

Fleet 安全漏洞

Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.80.1 contained security...

Fleet 安全漏洞

Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.80.1 contained security...

CVE-2026-41050

Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their GitRepo...

CVE-2026-41050

Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their GitRepo...

CVE-2026-41050 Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering

Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their GitRepo...

CVE-2026-41050

CVE-2026-41050 describes a multi-tenant isolation failure in Fleet’s Helm deployer where ServiceAccount impersonation was not consistently applied in two code paths, causing the Helm template engine to run Kubernetes API queries and read Secret/ConfigMap references with the fleet-agent’s cluster-...

CVE-2026-41050 Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering

Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their GitRepo...

Fleet 安全漏洞

Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. There is a security vulnerability in Fleet, which stems...

GHSA-765J-QFRP-HM3J Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering

Impact Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their GitRepo. Helm lookup bypass: The Helm template...

Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering

Impact Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their GitRepo. Helm lookup bypass: The Helm template...

PT-2026-38359

Name of the Vulnerable Software and Affected Versions Rancher versions prior to v2.14.1 Rancher versions prior to v2.13.5 Rancher versions prior to v2.12.9 Rancher versions prior to v2.11.13 Rancher version v2.10.11 Description Fleet's Helm deployer fails to fully apply ServiceAccount impersonati...

Moderate: Red Hat Enhancement Advisory: Red Hat Edge Manager Version 1.1.2

Red Hat Edge Manager Version 1.1.2 Red Hat Edge Manager RHEM provides simple, scalable, and secure management for edge fleets. Users declare their target OS image, host configuration, and applications; the RHEM agent then automatically rolls out these configurations, reporting health and progress...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kubescape, act, apko, gitaly, xeol, grafana-alloy-fips, grafana-alloy, grafana, cloudbeat-fips, pulumi, steampipe, packer-fips, k9s, nemo, mapotf, amazon-ssm-agent-fips, flux-fips, rancher-fleet-fips, k9s-fips, upwind-agent, grafana-fips, kots, argo-workflows-fips,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, longhorn-manager-fips, crossplane-provider-family-aws-fips, metallb, kubernetes-csi-node-driver-registrar-fips, go-discover, crossplane-provider-aws-athena, trident-fips, crossplane-provider-aws-cloudwatchevents,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, longhorn-manager-fips, crossplane-provider-family-aws-fips, metallb, kubernetes-csi-node-driver-registrar-fips, go-discover, crossplane-provider-aws-athena, trident-fips, crossplane-provider-aws-cloudwatchevents,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, dynamic-localpv-provisioner, headlamp, hubble, kargo, skaffold, cilium, terraform-provider-kubernetes, cluster-api, rancher-fleet, postgres-operator, cert-manager-istio-csr, kube-arangodb, trivy-operator, velero, falcoctl, kubevela, consul-k8s,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, dynamic-localpv-provisioner, headlamp, hubble, kargo, skaffold, cilium, terraform-provider-kubernetes, cluster-api, rancher-fleet, postgres-operator, cert-manager-istio-csr, kube-arangodb, trivy-operator, velero, falcoctl, kubevela, consul-k8s,...

BIT-KIBANA-2026-4498 Execution with Unnecessary Privileges in Kibana Leading to reading index data beyond their direct Elasticsearch RBAC scope

Execution with Unnecessary Privileges CWE-250 in Kibana’s Fleet plugin debug route handlers can lead reading index data beyond their direct Elasticsearch RBAC scope via Privilege Abuse CAPEC-122. This requires an authenticated Kibana user with Fleet sub-feature privileges such as agents, agent...