# Rancher and Fleet October 2026 security release: any Rancher user could become cluster-admin on the management cluster (CVE-2026-94290) · pwn.watch

> SUSE shipped Rancher Manager v2.15.3, v2.14.7, v2.13.11, v2.12.15 and v2.11.19 with Fleet v0.16.3, v0.15.8, v0.14.12 and v0.13.17 on Oct 29 2026, fixing six vulnerabilities. The worst is CVE-2026-94290 (CVSS 4.0 9.4 critical) in Fleet's agent management controller, which runs on the Rancher local cluster as cluster-admin: it did not restrict which kubeconfig secrets a Fleet Cluster object could reference, so an authenticated Rancher user with only the default user global role could get full cluster-admin on the management cluster, exposing every secret there, including credentials for all downstream clusters. Fleet is enabled by default in Rancher. The release also fixes CVE-2026-104615 (high), a Fleet cluster identity takeover where a holder of a workspace registration token could claim another cluster's identity and read Secrets and ConfigMaps synced into its Fleet namespace; CVE-2026-104623 (medium), where any authenticated user could get an unprivileged shell pod on the management cluster; CVE-2026-88809 (high), a meta proxy allowlist bypass leading to server-side request forgery; CVE-2026-88811 (high), where the meta proxy leaked the caller's Rancher credentials to third-party cloud provider hosts; and CVE-2026-88810, a GlobalRole RBAC escalation fixed in v2.15.3.

Page: https://pwn.watch/i/rancher-fleet-oct-2026-security-release-cluster-admin-escalation · generated 2026-10-30T18:57:08.978Z

## Status
- Severity: critical · status: live · patch: patched
- Product: SUSE Rancher Manager and Rancher Fleet
- Started: 2026-10-29
- CVEs: CVE-2026-94290, CVE-2026-104615, CVE-2026-104623, CVE-2026-88809, CVE-2026-88810, CVE-2026-88811
- Affected: Rancher Manager 2.15.0 to 2.15.2, 2.14.0 to 2.14.6, 2.13.0 to 2.13.10, 2.12.0 to 2.12.14 (Fleet CVEs and CVE-2026-104623); Rancher Manager 2.11.0 to 2.11.18 (CVE-2026-104623, CVE-2026-88809, CVE-2026-88811); Fleet 0.16.0 to 0.16.2, 0.15.0 to 0.15.7, 0.14.0 to 0.14.11, 0.13.0 to 0.13.16
- Fixed in: Rancher Manager v2.15.3; Rancher Manager v2.14.7; Rancher Manager v2.13.11; Rancher Manager v2.12.15; Rancher Manager v2.11.19; Fleet v0.16.3 / v0.15.8 / v0.14.12 / v0.13.17

## Follow this incident
- RSS (one item per update): https://pwn.watch/i/rancher-fleet-oct-2026-security-release-cluster-admin-escalation/feed.xml
- JSON Feed: https://pwn.watch/i/rancher-fleet-oct-2026-security-release-cluster-admin-escalation/feed.json
- Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/rancher-fleet-oct-2026-security-release-cluster-admin-escalation.json
- This file: https://pwn.watch/i/rancher-fleet-oct-2026-security-release-cluster-admin-escalation/llms.txt

## Updates (newest first)
- 2026-10-29: SUSE releases Rancher Manager v2.15.3, v2.14.7, v2.13.11, v2.12.15 and v2.11.19 with Fleet v0.16.3, v0.15.8, v0.14.12 and v0.13.17, fixing six CVEs, and publishes GitHub advisories, including critical CVE-2026-94290 (any Rancher user to cluster-admin on the local cluster through Fleet's agent management controller). (https://documentation.suse.com/cloudnative/rancher-manager/v2.15/en/security/cves.html)

## Fix brief
# Security brief: Rancher and Fleet October 2026 security release: any Rancher user could become cluster-admin on the management cluster (CVE-2026-94290)

Source: https://pwn.watch/i/rancher-fleet-oct-2026-security-release-cluster-admin-escalation · status: live · severity: critical · updated Oct 30, 2026, 17:31 UTC

## Patch status
**PATCHED: fixed releases exist. Upgrade to a fixed version.**

## What it is
SUSE shipped Rancher Manager v2.15.3, v2.14.7, v2.13.11, v2.12.15 and v2.11.19 with Fleet v0.16.3, v0.15.8, v0.14.12 and v0.13.17 on Oct 29 2026, fixing six vulnerabilities. The worst is CVE-2026-94290 (CVSS 4.0 9.4 critical) in Fleet's agent management controller, which runs on the Rancher local cluster as cluster-admin: it did not restrict which kubeconfig secrets a Fleet Cluster object could reference, so an authenticated Rancher user with only the default user global role could get full cluster-admin on the management cluster, exposing every secret there, including credentials for all downstream clusters. Fleet is enabled by default in Rancher. The release also fixes CVE-2026-104615 (high), a Fleet cluster identity takeover where a holder of a workspace registration token could claim another cluster's identity and read Secrets and ConfigMaps synced into its Fleet namespace; CVE-2026-104623 (medium), where any authenticated user could get an unprivileged shell pod on the management cluster; CVE-2026-88809 (high), a meta proxy allowlist bypass leading to server-side request forgery; CVE-2026-88811 (high), where the meta proxy leaked the caller's Rancher credentials to third-party cloud provider hosts; and CVE-2026-88810, a GlobalRole RBAC escalation fixed in v2.15.3.

Severity detail: CVE-2026-94290 is CVSS 4.0 9.4 critical per the Fleet GitHub advisory: a user with only the default user global role can get cluster-admin on the Rancher management cluster and, through stored credentials, every downstream cluster. No in-the-wild exploitation reported.

- Product: SUSE Rancher Manager and Rancher Fleet
- CVE / advisory ids: CVE-2026-94290, CVE-2026-104615, CVE-2026-104623, CVE-2026-88809, CVE-2026-88810, CVE-2026-88811

## Affected versions
- Rancher Manager 2.15.0 to 2.15.2, 2.14.0 to 2.14.6, 2.13.0 to 2.13.10, 2.12.0 to 2.12.14 (Fleet CVEs and CVE-2026-104623)
- Rancher Manager 2.11.0 to 2.11.18 (CVE-2026-104623, CVE-2026-88809, CVE-2026-88811)
- Fleet 0.16.0 to 0.16.2, 0.15.0 to 0.15.7, 0.14.0 to 0.14.11, 0.13.0 to 0.13.16

## Check whether you're affected
No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above.

## Fix
Upgrade to one of these fixed versions (or later on the same branch):
- Rancher Manager v2.15.3
- Rancher Manager v2.14.7
- Rancher Manager v2.13.11
- Rancher Manager v2.12.15
- Rancher Manager v2.11.19
- Fleet v0.16.3 / v0.15.8 / v0.14.12 / v0.13.17

After upgrading, re-run the checks above and redeploy/restart the affected services.

## Secrets to rotate
This incident involves possible credential exposure. Rotate any credentials (API keys, tokens, env vars, SSH keys) that were present on affected systems or in affected builds while vulnerable/compromised versions were installed, and review access logs.

## Specific notes
If you run Rancher Manager, upgrade to v2.15.3, v2.14.7, v2.13.11 or v2.12.15 (which bundle the fixed Fleet), or v2.11.19 on the 2.11 line. Until then, limit who can sign in to Rancher, since the critical Fleet bug only needs the default user role. After upgrading, review Fleet Cluster objects in user-controlled namespaces for kubeconfig secret references to the local cluster, and consider rotating downstream cluster credentials and API tokens if untrusted users had Rancher accounts.

## Latest updates
- Oct 29, 2026: SUSE releases Rancher Manager v2.15.3, v2.14.7, v2.13.11, v2.12.15 and v2.11.19 with Fleet v0.16.3, v0.15.8, v0.14.12 and v0.13.17, fixing six CVEs, and publishes GitHub advisories, including critical CVE-2026-94290 (any Rancher user to cluster-admin on the local cluster through Fleet's agent management controller).

## Advisories
- [Security Advisories and CVEs (Rancher Manager v2.15)](https://documentation.suse.com/cloudnative/rancher-manager/v2.15/en/security/cves.html) (SUSE)
- [Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller (GHSA-qfmw-gw96-ffcr)](https://github.com/rancher/fleet/security/advisories/GHSA-qfmw-gw96-ffcr) (Rancher (GitHub))
- [Cluster identity takeover in Fleet cluster registration (GHSA-gx8v-2929-9q95)](https://github.com/rancher/fleet/security/advisories/GHSA-gx8v-2929-9q95) (Rancher (GitHub))
- [Authorization bypass on the local cluster shell endpoint (GHSA-8x6f-2v58-x6p7)](https://github.com/rancher/rancher/security/advisories/GHSA-8x6f-2v58-x6p7) (Rancher (GitHub))
- [Rancher meta proxy allowlist bypass leading to server-side request forgery (GHSA-f9gf-wh3x-jx3v)](https://github.com/rancher/rancher/security/advisories/GHSA-f9gf-wh3x-jx3v) (Rancher (GitHub))
- [Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy (GHSA-x82x-2qj6-5rm2)](https://github.com/rancher/rancher/security/advisories/GHSA-x82x-2qj6-5rm2) (Rancher (GitHub))

## Write-ups & news
- [Rancher Manager v2.15.3 release notes](https://documentation.suse.com/cloudnative/rancher-manager/v2.15/en/release-notes/v2.15.3.html)

---
Machine-readable: https://pwn.watch/i/rancher-fleet-oct-2026-security-release-cluster-admin-escalation.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.