PT-2026-53899 · Rancher · Rancher Fleet
CVSS v4.0
5.3
Medium
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Rancher Fleet versions 0.12.0 through 0.12.16
Rancher Fleet versions 0.13.0 through 0.13.12
Rancher Fleet versions 0.14.0 through 0.14.7
Rancher Fleet versions 0.15.0 through 0.15.3
Description
A path traversal issue exists within the ImageScan subsystem. This flaw allows access to files outside of the intended directory, which can lead to a denial of service. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Relative Path Traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rancher Fleet