CVE-2026-44948

published 2026-06-30

CVE-2026-44948: A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and…

Priority P3 34 medium 5.3 CVSS 4.0

AV N AC L AT N PR L UI N VC N VI N VA L SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the intended directory, causing a denial of service.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
suse	rancher	>= 0.12.0 < 0.12.16	0.12.16
suse	rancher	>= 0.13.0 < 0.13.12	0.13.12
suse	rancher	>= 0.14.0 < 0.14.7	0.14.7
suse	rancher	>= 0.15.0 < 0.15.3	0.15.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-23