CVE-2026-41050

creationtimestamp| type| source ---|---|--- 2026-05-07 07:17:53+00:00| seen| https://bsky.app/profile/cyberlensai.bsky.social/post/3mlaoe3cvht2e 2026-05-08 12:57:11+00:00| seen| https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mldrrkgqtva2 2026-05-08 20:38:14+00:00|...

SUSE CVE-2026-41050

Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their GitRepo...