CVE-2026-93538

SUSE Rancher Fleet contains a cross-tenant authorization issue where cluster labels supplied by a registering agent are incorrectly applied to the upstream Cluster object. This includes labels in the reserved management.cattle.io/ namespace, such as the cluster display name. Because Fleet uses th...