CVE-2026-93537
Received Received - Intake

Information Disclosure in SUSE Rancher Fleet

Publication date: 2026-09-28

Last updated on: 2026-09-28

Assigner: SUSE

Description
A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or modify a GitRepo, can cause SUSE Rancher Fleet to read files from the filesystem of the environment that processes the bundle and include their contents in the generated Bundle resource. This can expose configuration or credential material that the user has no Kubernetes RBAC permission to read, including Helm registry credentials made available to the bundle-processing job when per-path Helm credentials are configured. This affects Fleet 0.16 before 0.16.2, 0.15 before 0.15.7, 0.14 before 0.14.11, 0.13 before 0.13.16, 0.12 before 0.12.20 and potentially older unsupported versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-28
Last Modified
2026-09-28
Generated
2026-09-28
AI Q&A
2026-09-28
EPSS Evaluated
N/A
NVD
CVE-2026-93537
EUVD
EUVD-2026-88287

Affected Vendors & Products

Showing 15 associated CPEs
Vendor Product Version / Range
suse rancher_fleet From 0.12.0 (inc) to 0.16.2 (exc)
suse rancher_fleet From 0.13.0 (inc) to 0.14.11 (exc)
suse rancher_fleet From 0.14.0 (inc) to 0.15.7 (exc)
suse rancher_fleet From 0.15.0 (inc) to 0.16.2 (exc)
suse rancher_fleet From 0.16.0 (inc) to 0.16.2 (exc)
suse rancher_fleet 0.12
suse rancher_fleet 0.13
suse rancher_fleet 0.14
suse rancher_fleet 0.15
suse rancher_fleet 0.16
suse rancher_fleet to 0.16.2 (exc)
suse rancher_fleet to 0.15.7 (exc)
suse rancher_fleet to 0.14.11 (exc)
suse rancher_fleet to 0.13.16 (exc)
suse rancher_fleet to 0.12.20 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-23 The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a path traversal flaw in SUSE Rancher Fleet's Helm valuesFiles handling. It allows users with write access to Git repositories or GitRepo resources to read sensitive filesystem files outside the intended bundle directory by referencing them in fleet.yaml. The issue affects Fleet versions from v0.12.0 to v0.16.1 and can expose configuration or credential data, including Helm registry credentials.

Detection Guidance

Check Fleet versions for affected releases (0.12.0 to 0.16.1) using kubectl get deployments -n cattle-fleet-system -l app=fleet-agent or helm list -n cattle-fleet-system. Inspect GitRepo resources for valuesFiles entries pointing outside bundle directories. Review filesystem access logs for unauthorized file reads during bundle processing.

Impact Analysis

An attacker with Git push access or permission to modify GitRepo resources could read sensitive files from the filesystem where Fleet processes bundles. This includes configuration files or credentials that the user should not have access to via Kubernetes RBAC, potentially leading to unauthorized data exposure or credential theft.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of sensitive data, violating compliance requirements such as GDPR (data protection) or HIPAA (health information privacy). Exposure of credentials or configuration files may result in data breaches, triggering regulatory penalties or legal consequences.

Mitigation Strategies

Upgrade Fleet to patched versions (v0.12.20, v0.13.16, v0.14.11, v0.15.7, v0.16.2) immediately. Restrict write access to Git repositories and GitRepo resources. Audit existing GitRepo configurations for suspicious valuesFiles paths. Disable per-path Helm credentials if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93537. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart