PT-2026-53899 · Suse · Rancher

Sergey Kanibor · Publicado 2026-06-30 · Atualizado 2026-06-30 · CVE-2026-44948

Mitre

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the intended directory, causing a denial of service.

Correção

Relative Path Traversal

Enumeração de Fraquezas

CWE-23

Identificadores relacionados

CVE-2026-44948

Produtos afetados

Rancher

Referências · 2

• https://github.com/rancher/fleet/security/advisories/GHSA-c45g-6c2c-rj3p · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-44948 · Nota de Segurança