{"id":"CVE-2026-44948","state":"PUBLISHED","title":"Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler","description":"A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the intended directory, causing a denial of service.","publishedAt":"2026-06-30T15:12:17.346Z","updatedAt":"2026-06-30T16:00:33.240Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","source":"suse"},"assigner":"suse","products":["SUSE Rancher"],"affected":[{"vendor":"SUSE","product":"Rancher","packageName":"Fleet","defaultStatus":"unaffected","versions":[{"version":"0.12.0","status":"affected","lessThan":"0.12.16","versionType":"semver"},{"version":"0.13.0","status":"affected","lessThan":"0.13.12","versionType":"semver"},{"version":"0.14.0","status":"affected","lessThan":"0.14.7","versionType":"semver"},{"version":"0.15.0","status":"affected","lessThan":"0.15.3","versionType":"semver"}],"repo":"https://github.com/rancher/fleet/"}],"references":["https://github.com/rancher/fleet/security/advisories/GHSA-c45g-6c2c-rj3p"],"weaknesses":["CWE-23"],"ingestedAt":"2026-10-29T20:11:57.932Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/44xxx/CVE-2026-44948.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-44948","state":"PUBLISHED","datePublished":"2026-06-30T15:12:17.346Z","dateUpdated":"2026-06-30T16:00:33.240Z","assignerShortName":"suse","assignerOrgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","dateReserved":"2026-05-08T12:29:48.969Z"},"containers":{"cna":{"title":"Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler","descriptions":[{"lang":"en","value":"A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the intended directory, causing a denial of service."}],"affected":[{"vendor":"SUSE","product":"Rancher","packageName":"Fleet","defaultStatus":"unaffected","versions":[{"version":"0.12.0","status":"affected","lessThan":"0.12.16","versionType":"semver"},{"version":"0.13.0","status":"affected","lessThan":"0.13.12","versionType":"semver"},{"version":"0.14.0","status":"affected","lessThan":"0.14.7","versionType":"semver"},{"version":"0.15.0","status":"affected","lessThan":"0.15.3","versionType":"semver"}],"repo":"https://github.com/rancher/fleet/"}],"references":[{"url":"https://github.com/rancher/fleet/security/advisories/GHSA-c45g-6c2c-rj3p","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-23","lang":"en","description":"CWE-23 Relative path traversal","type":"CWE"}]}],"providerMetadata":{"shortName":"suse","orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","dateUpdated":"2026-06-30T15:12:17.346Z"},"datePublic":"2026-06-29T15:08:00.000Z","impacts":[{"capecId":"CAPEC-126","descriptions":[{"lang":"en","value":"CAPEC-126 Path Traversal"}]}],"credits":[{"lang":"en","value":"Sergey Kanibor","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.2"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-30T15:59:49.142430Z","id":"CVE-2026-44948","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-30T16:00:33.240Z"}}]}}}