{"id":"CVE-2026-88808","published":"2026-09-28T16:17:16.150","lastModified":"2026-09-29T21:32:59.833","description":"A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment. It affects multi-tenancy environments where different tenants share the same downstream clusters, for example different privileged or untrusted teams inside the same organization. This could lead to overwritten configuration files.\n\nThis issue affected SUSE Rancher Fleet 0.16 before 0.16.2, 0.15 before 0.15.7, and 0.14 before 0.14.11.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-250"],"vendors":[],"products":[],"references":[{"url":"https://github.com/rancher/fleet/security/advisories/GHSA-q9v4-358v-r8q5","tags":[]}],"exploitRefs":[{"url":"https://github.com/rancher/fleet/security/advisories/GHSA-q9v4-358v-r8q5","tags":[]}],"hasPoc":true,"ai":{"summary":"The vulnerability allows the Fleet agent to write resources to downstream clusters using cluster-admin credentials, potentially overwriting configuration files in multi-tenancy environments.","exploitability":"Exploitation requires access to the Fleet agent and knowledge of the target cluster's credentials. Precondition is the presence of multi-tenancy with shared downstream clusters.","blast_radius":"If exploited, this could lead to unauthorized changes in configuration files across multiple clusters, impacting multiple tenants within the same organization.","remediation":"Upgrade to SUSE Rancher Fleet 0.16.2 or later, 0.15.7 or later, or 0.14.11 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","config-overwrite","multi-tenancy","cluster-admin"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-30T09:07:56.375Z"}}