CVE-2026-44948

Vulnerability Description

A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the intended directory, causing a denial of service.

Related Weaknesses (CWE)

CWE-23

References

https://github.com/rancher/fleet/security/advisories/GHSA-c45g-6c2c-rj3p

FAQ

What is CVE-2026-44948?

CVE-2026-44948 is a documented vulnerability. A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traver...

How severe is CVE-2026-44948?

CVSS scoring is not yet available for CVE-2026-44948. Check NVD for updates.

Is there a patch for CVE-2026-44948?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.