CVE-2026-93539 Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver

A vulnerability was discovered in Fleet's Git webhook receiver the gitjob webhook service. When a webhook secret is not configured, incoming webhook requests are accepted without verification, and processing a request can change the spec.pollingInterval field of a matching GitRepo resource in any...

CVE-2026-93539 Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver

A vulnerability was discovered in Fleet's Git webhook receiver the gitjob webhook service. When a webhook secret is not configured, incoming webhook requests are accepted without verification, and processing a request can change the spec.pollingInterval field of a matching GitRepo resource in any...

CVE-2026-93539

A vulnerability exists in the gitjob webhook service of SUSE Rancher Fleet versions 0.16 before 0.16.2 . When a webhook secret is not configured, the receiver accepts unauthenticated requests, allowing a caller with network access and no Kubernetes credentials to mutate the spec.pollingInterval f...