Tag
Rancher Fleet Helm Deployer Vulnerability Allows Security Bypass
2 rules 2 TTPsA remote, authenticated attacker can exploit a vulnerability in Rancher Fleet Helm Deployer to bypass security measures and disclose sensitive information, which may enable further attacks.
Rancher Fleet Helm Impersonation Bypass Vulnerability
2 rules 1 TTPFleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their `GitRepo`.
Rancher Extensions Path Traversal Vulnerability
2 rules 1 TTPA path traversal vulnerability (CVE-2026-25705) exists in Rancher's Extensions through the `compressedEndpoint` field in a `UIPlugin` deployment, allowing malicious UI extensions to overwrite Rancher binaries, tamper with cluster state, or write to the host filesystem.
Rancher Vulnerability Allows Remote Code Execution and File Manipulation
2 rules 2 TTPsAn authenticated, remote attacker can exploit a vulnerability in Rancher to execute arbitrary program code and manipulate files, potentially leading to privilege escalation and system compromise.