Skip to content
Threat Feed

Tag

Impersonation

1 brief RSS
critical advisory

Rancher Fleet Helm Impersonation Bypass Vulnerability

Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their `GitRepo`.

Fleet +5 rancher helm kubernetes impersonation privilege-escalation cve-2026-41050
2r 1t