CVE-2026-94290

In SUSE Rancher Fleet , an attacker can achieve cluster-admin privileges on the management cluster due to insufficient restrictions on kubeconfig secrets referenced by a Fleet Cluster object . Specifically, the controller fails to limit which secrets an ordinary user can reference; if a user asso...