CVE-2026-75036

Fleet (Rancher's GitOps operator) is vulnerable to DNS-based information disclosure during Helm template preprocessing. The Sprig getHostByName function, evaluated by the Fleet controller, can reach network resources outside the management cluster, allowing a user who can supply bundle content to...