SUSE patches critical Rancher Fleet flaw enabling cluster takeover

SUSE has published advisories on 29 October 2026 warning of two serious Rancher Fleet vulnerabilities in the GitOps management engine, with the most severe CVE-2026-94290 allowing local privilege escalation to cluster-admin. Fleet’s agent management controller runs with cluster-admin rights on the management cluster; the flaw could permit an authenticated Rancher user with minimal permissions to reference kubeconfig secrets in a way that enables payload execution at root level.

The second issue, CVE-2026-104615, concerns cluster identity takeover during registration, where a cluster identity claimed in a registration request could be accepted without being bound to the supplied registration token, potentially enabling an attacker holding a valid workspace token to seize another cluster’s identity and access secrets. No active exploitation in the wild has been reported.

Affected versions cover standalone Fleet prior to 0.16.3, 0.15.8, 0.14.12 and 0.13.17, and Fleet embedded in Rancher prior to 2.15.3, 2.14.7, 2.13.11, and 2.12.15. Fixes have been released: Fleet 0.16.3, 0.15.8, 0.14.12 and 0.13.17 (+1), alongside patched Rancher releases such as 2.15.3, 2.14.7, 2.13.11 and 2.12.15. CVSSv3 scores place CVE-2026-94290 at 9.1 (CWE-250) and CVE-2026-104615 at 7.9 (CWE-290); both are reported as not exploited to date.

Administrators are urged to update to the patched releases immediately and to audit for unusual cluster role bindings, while removing workspace self-service rights from untrusted accounts.