CVE-2026-104615

    Dashboard / Vulnerabilities / CVE-2026-104615

    CVE-2026-104615

    Published: 30 Oct 2026Last Modified: 8 Nov 2026

    Summary: Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace

    Details: A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.17, 0.14.0 up to 0.14.12, 0.15.0 up t o 0.15.17 and 0.16.0 up to 0.16.3. The cluster identity claimed by a registration request was accepted without being bound to the registration token that the request was made with. As a result, a registration request could be associated with a managed cluster that was originally registered with a different registration token.

    References: https://github.com/rancher/fleet/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104615.json, https://github.com/rancher/fleet/security/advisories/GHSA-gx8v-2929-9q95, https://nvd.nist.gov/vuln/detail/CVE-2026-104615

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- c1a4325041578226f4f333b9f05d651ee4b03577
    Fixed -2137e669ebec4d397262df1149edb65bceaa4466

    Affected versions

    v0.16.3-rc.1
    v0.16.3-beta.2
    v0.16.3-beta.1
    v0.16.3-alpha.2
    v0.16.3-alpha.1
    v0.16.2
    v0.16.2-rc.2
    v0.16.2-rc.1
    v0.16.1-rc.2
    v0.16.1-rc.1
    v0.16.1
    v0.16.1-beta.2
    v0.16.1-beta.1
    v0.16.0-rc.5
    v0.16.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-104615 | CVE-DB