CVE-2026-88808

Summary

The vulnerability allows the Fleet agent to write resources to downstream clusters using cluster-admin credentials, potentially overwriting configuration files in multi-tenancy environments.

Exploitability

Exploitation requires access to the Fleet agent and knowledge of the target cluster's credentials. Precondition is the presence of multi-tenancy with shared downstream clusters.

Blast radius

If exploited, this could lead to unauthorized changes in configuration files across multiple clusters, impacting multiple tenants within the same organization.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to SUSE Rancher Fleet 0.16.2 or later, 0.15.7 or later, or 0.14.11 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.