EUVD lists cluster registration flaw in SUSE Rancher Fleet (EUVD-2026-114135)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- SUSE
- Product
- Rancher Fleet
- First seen
Summary
A Mastodon post relaying an EUVD entry says a vulnerability exists in the cluster registration flow of SUSE Rancher Fleet in several version ranges, including before 0.12 and up to 0.16.3. The entry gives a CVSS v3.1 score of 7.9/10.
If you use SUSE
Check whether your Rancher Fleet version falls in an affected range
Update Fleet to a fixed release from SUSE
Review the EUVD-2026-114135 entry for details
Upgrade SUSE Rancher Manager to a fixed release for your version line
Review access to the local cluster shell feature
Check the SUSE security advisory for patched versions
What the sources say 2
· Mastodon: “A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.17, 0.14.0 up to 0.14.12, 0.15.0 up t o 0.15.17 and 0.16.0 up to 0.16.3.” Source
· Mastodon: “A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up ...” Source