CVE-2026-44948
Full vulnerability record from the local CVENow database.
Description
A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the intended directory, causing a denial of service.
Severity
MEDIUM
CVSS score
5.3
(v4.0)
Vulnerability status
Analyzed
Source identifier
Published
2026-06-30 16:16:52.607000
Last modified
2026-10-25 21:10:00.770000
View original CVE JSON
{
"id": "CVE-2026-44948",
"sourceIdentifier": "[email protected]",
"published": "2026-06-30T16:16:52.607",
"lastModified": "2026-10-25T21:10:00.770",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the intended directory, causing a denial of service."
},
{
"lang": "es",
"value": "Una vulnerabilidad de salto de ruta fue encontrada en el subsistema ImageScan de Fleet en Rancher Fleet 0.12.0 hasta 0.12.16, 0.13.0 hasta 0.13.12, 0.14.0 hasta 0.14.7 y 0.15.0 hasta 0.15.3, la cual podría ser utilizada para saltar fuera del directorio previsto, causando una denegación de servicio."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "SUSE",
"product": "Rancher",
"defaultStatus": "unaffected",
"packageName": "Fleet",
"repo": "https://github.com/rancher/fleet/",
"versions": [
{
"version": "0.12.0",
"lessThan": "0.12.16",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.13.0",
"lessThan": "0.13.12",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.14.0",
"lessThan": "0.14.7",
"versionType": "semver",
"status": "affected"
},
{
"version": "0.15.0",
"lessThan": "0.15.3",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-06-30T15:59:49.142430Z",
"id": "CVE-2026-44948",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-23"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:suse:rancher_fleet:*:*:*:*:*:*:*:*",
"versionStartIncluding": "0.12.0",
"versionEndExcluding": "0.12.16",
"matchCriteriaId": "22E5449F-D0B2-4A55-8A7A-3851A06F3FF2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:suse:rancher_fleet:*:*:*:*:*:*:*:*",
"versionStartIncluding": "0.13.0",
"versionEndExcluding": "0.13.12",
"matchCriteriaId": "FDE98343-72B7-4D53-9F13-4C83ABE6236D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:suse:rancher_fleet:*:*:*:*:*:*:*:*",
"versionStartIncluding": "0.14.0",
"versionEndExcluding": "0.14.7",
"matchCriteriaId": "1BC19616-14DD-4A55-AA7E-7B3DDF2ABC6E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:suse:rancher_fleet:*:*:*:*:*:*:*:*",
"versionStartIncluding": "0.15.0",
"versionEndExcluding": "0.15.3",
"matchCriteriaId": "A20E7D23-4861-4010-BC14-AF9B77E69C82"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/rancher/fleet/security/advisories/GHSA-c45g-6c2c-rj3p",
"source": "[email protected]",
"tags": [
"Vendor Advisory",
"Mitigation"
]
}
]
}