CVE-2026-94290 - Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller
CVE ID :CVE-2026-94290 Published : Nov. 2, 2026, 4:17 p.m. | 46 minutes ago Description :SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent on the target cluster. The controller did not sufficiently restrict which kubeconfig...