Skip to content
Threat Feed
Subscribe

Product

Fleet >= 0.15.0, < 0.15.2

1 brief RSS
high advisory

Fleet PSS Bypass Vulnerability (CVE-2026-44938) via addLabelsFromOptions

A vulnerability in Fleet's agent-side deployer (CVE-2026-44938) allows an attacker with `git push` access to a Fleet-monitored repository to overwrite Pod Security Standards (PSS) enforcement labels on target Kubernetes namespaces, bypassing admission controls and enabling the deployment of otherwise prohibited workloads.

Fleet >= 0.15.0, < 0.15.2 +3 kubernetes fleet pss-bypass admission-controller supply-chain defense-evasion