CVE-2026-44936

Published: Jul 6, 2026Modified: Jul 9, 2026

5.0

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Exploitability: 3.1 / Impact: 1.4

Source: NVD

Description

Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 forwards Helm authentication credentials (BasicAuth) to any URL specified in the helm.repo field of a fleet.yaml file, allowing attackers able to push to fleet monitored git repos to leak helm access credentials.

Affected (4)

Products: Suse: Rancher Fleet

Suse

1 product

Rancher Fleet

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Suse Rancher Fleet	From 0.12.0 to 0.12.15
Suse Rancher Fleet	From 0.13.0 to 0.13.11
Suse Rancher Fleet	From 0.14.0 to 0.14.6
Suse Rancher Fleet	From 0.15.0 to 0.15.2

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (1)

https://github.com/advisories/GHSA-hx4v-cxpf-vh8m

Source: meissner@suse.de

ExploitThird Party AdvisoryMitigation

Timeline

No history available yet.