cve.now·· 3 小时前推荐指数44
CVE-2026-94290：SUSE Rancher Fleet 可致 Rancher 本地集群提权至 cluster-admin
CVE-2026-94290: Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller
AI 导读
CVE-2026-94290（CVSS 9.1，Critical）披露 SUSE Rancher Fleet 的 agent management controller 未充分限制 Fleet Cluster 对 kubeconfig secret 的引用。
来源：cve.now · cve.now